/*********************IMPORTANT DRAKVUF LICENSE TERMS***********************
 *                                                                         *
 * DRAKVUF (C) 2014-2022 Tamas K Lengyel.                                  *
 * Tamas K Lengyel is hereinafter referred to as the author.               *
 * This program is free software; you may redistribute and/or modify it    *
 * under the terms of the GNU General Public License as published by the   *
 * Free Software Foundation; Version 2 ("GPL"), BUT ONLY WITH ALL OF THE   *
 * CLARIFICATIONS AND EXCEPTIONS DESCRIBED HEREIN.  This guarantees your   *
 * right to use, modify, and redistribute this software under certain      *
 * conditions.  If you wish to embed DRAKVUF technology into proprietary   *
 * software, alternative licenses can be acquired from the author.         *
 *                                                                         *
 * Note that the GPL places important restrictions on "derivative works",  *
 * yet it does not provide a detailed definition of that term.  To avoid   *
 * misunderstandings, we interpret that term as broadly as copyright law   *
 * allows.  For example, we consider an application to constitute a        *
 * derivative work for the purpose of this license if it does any of the   *
 * following with any software or content covered by this license          *
 * ("Covered Software"):                                                   *
 *                                                                         *
 * o Integrates source code from Covered Software.                         *
 *                                                                         *
 * o Reads or includes copyrighted data files.                             *
 *                                                                         *
 * o Is designed specifically to execute Covered Software and parse the    *
 * results (as opposed to typical shell or execution-menu apps, which will *
 * execute anything you tell them to).                                     *
 *                                                                         *
 * o Includes Covered Software in a proprietary executable installer.  The *
 * installers produced by InstallShield are an example of this.  Including *
 * DRAKVUF with other software in compressed or archival form does not     *
 * trigger this provision, provided appropriate open source decompression  *
 * or de-archiving software is widely available for no charge.  For the    *
 * purposes of this license, an installer is considered to include Covered *
 * Software even if it actually retrieves a copy of Covered Software from  *
 * another source during runtime (such as by downloading it from the       *
 * Internet).                                                              *
 *                                                                         *
 * o Links (statically or dynamically) to a library which does any of the  *
 * above.                                                                  *
 *                                                                         *
 * o Executes a helper program, module, or script to do any of the above.  *
 *                                                                         *
 * This list is not exclusive, but is meant to clarify our interpretation  *
 * of derived works with some common examples.  Other people may interpret *
 * the plain GPL differently, so we consider this a special exception to   *
 * the GPL that we apply to Covered Software.  Works which meet any of     *
 * these conditions must conform to all of the terms of this license,      *
 * particularly including the GPL Section 3 requirements of providing      *
 * source code and allowing free redistribution of the work as a whole.    *
 *                                                                         *
 * Any redistribution of Covered Software, including any derived works,    *
 * must obey and carry forward all of the terms of this license, including *
 * obeying all GPL rules and restrictions.  For example, source code of    *
 * the whole work must be provided and free redistribution must be         *
 * allowed.  All GPL references to "this License", are to be treated as    *
 * including the terms and conditions of this license text as well.        *
 *                                                                         *
 * Because this license imposes special exceptions to the GPL, Covered     *
 * Work may not be combined (even as part of a larger work) with plain GPL *
 * software.  The terms, conditions, and exceptions of this license must   *
 * be included as well.  This license is incompatible with some other open *
 * source licenses as well.  In some cases we can relicense portions of    *
 * DRAKVUF or grant special permissions to use it in other open source     *
 * software.  Please contact tamas.k.lengyel@gmail.com with any such       *
 * requests.  Similarly, we don't incorporate incompatible open source     *
 * software into Covered Software without special permission from the      *
 * copyright holders.                                                      *
 *                                                                         *
 * If you have any questions about the licensing restrictions on using     *
 * DRAKVUF in other works, are happy to help.  As mentioned above,         *
 * alternative license can be requested from the author to integrate       *
 * DRAKVUF into proprietary applications and appliances.  Please email     *
 * tamas.k.lengyel@gmail.com for further information.                      *
 *                                                                         *
 * If you have received a written license agreement or contract for        *
 * Covered Software stating terms other than these, you may choose to use  *
 * and redistribute Covered Software under those terms instead of these.   *
 *                                                                         *
 * Source is provided to this software because we believe users have a     *
 * right to know exactly what a program is going to do before they run it. *
 * This also allows you to audit the software for security holes.          *
 *                                                                         *
 * Source code also allows you to port DRAKVUF to new platforms, fix bugs, *
 * and add new features.  You are highly encouraged to submit your changes *
 * on https://github.com/tklengyel/drakvuf, or by other methods.           *
 * By sending these changes, it is understood (unless you specify          *
 * otherwise) that you are offering unlimited, non-exclusive right to      *
 * reuse, modify, and relicense the code.  DRAKVUF will always be          *
 * available Open Source, but this is important because the inability to   *
 * relicense code has caused devastating problems for other Free Software  *
 * projects (such as KDE and NASM).                                        *
 * To specify special license conditions of your contributions, just say   *
 * so when you send them.                                                  *
 *                                                                         *
 * This program is distributed in the hope that it will be useful, but     *
 * WITHOUT ANY WARRANTY; without even the implied warranty of              *
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the DRAKVUF   *
 * license file for more details (it's in a COPYING file included with     *
 * DRAKVUF, and also available from                                        *
 * https://github.com/tklengyel/drakvuf/COPYING)                           *
 *                                                                         *
 ***************************************************************************/

#ifndef POOLTAG_PRIVATE_H
#define POOLTAG_PRIVATE_H

/*
 * https://msdn.microsoft.com/en-us/library/windows/hardware/ff559707%28v=vs.85%29.aspx
 */
enum pool_type
{
    NonPagedPool,
    NonPagedPoolExecute                   = NonPagedPool,
    PagedPool,
    NonPagedPoolMustSucceed               = NonPagedPool + 2,
    DontUseThisType,
    NonPagedPoolCacheAligned              = NonPagedPool + 4,
    PagedPoolCacheAligned,
    NonPagedPoolCacheAlignedMustS         = NonPagedPool + 6,
    MaxPoolType,
    NonPagedPoolBase                      = 0,
    NonPagedPoolBaseMustSucceed           = NonPagedPoolBase + 2,
    NonPagedPoolBaseCacheAligned          = NonPagedPoolBase + 4,
    NonPagedPoolBaseCacheAlignedMustS     = NonPagedPoolBase + 6,
    NonPagedPoolSession                   = 32,
    PagedPoolSession                      = NonPagedPoolSession + 1,
    NonPagedPoolMustSucceedSession        = PagedPoolSession + 1,
    DontUseThisTypeSession                = NonPagedPoolMustSucceedSession + 1,
    NonPagedPoolCacheAlignedSession       = DontUseThisTypeSession + 1,
    PagedPoolCacheAlignedSession          = NonPagedPoolCacheAlignedSession + 1,
    NonPagedPoolCacheAlignedMustSSession  = PagedPoolCacheAlignedSession + 1,
    NonPagedPoolNx                        = 512,
    NonPagedPoolNxCacheAligned            = NonPagedPoolNx + 4,
    NonPagedPoolSessionNx                 = NonPagedPoolNx + 32
};

static const char* pool_types[MaxPoolType] =
{
    [NonPagedPool]                          = "NonPagedPool",
    [PagedPool]                             = "PagedPool",
    [NonPagedPoolMustSucceed]               = "NonPagedPoolMustSucceed",
    [DontUseThisType]                       = "DontUseThisType",
    [NonPagedPoolCacheAligned]              = "NonPagedPoolCacheAligned",
    [PagedPoolCacheAligned]                 = "PagedPoolCacheAligned",
    [NonPagedPoolCacheAlignedMustS]         = "NonPagedPoolCacheAlignedMustS",
};

struct pooltag
{
    const char* tag;
    const char* source;
    const char* description;
};

#define TAG_COUNT 2254
static const struct pooltag tags[TAG_COUNT] =
{
    {.tag="8042", .source="i8042prt.sys", .description="PS/2 kb and mouse"},
    {.tag="@GMM", .source="<unknown>", .description="(Intel video driver) Memory manager"},
    {.tag="@KCH", .source="<unknown>", .description="(Intel video driver) Chipset specific service"},
    {.tag="@MP", .source="<unknown>", .description="(Intel video driver) Miniport related memory"},
    {.tag="@SB", .source="<unknown>", .description="(Intel video driver) Soft BIOS"},
    {.tag="Abos", .source="<unknown>", .description="Abiosdsk"},
    {.tag="AcdM", .source="<unknown>", .description="TDI AcdObjectInfoG"},
    {.tag="AcdN", .source="<unknown>", .description="TDI AcdObjectInfoG"},
    {.tag="Acp*", .source="acpi.sys", .description="ACPI Pooltags"},
    {.tag="ACPI", .source="acpi.sys", .description="ACPI"},
    {.tag="Adap", .source="<unknown>", .description="Adapter objects"},
    {.tag="Adbe", .source="<unknown>", .description="Adobe's font driver"},
    {.tag="AdSv", .source="vmsrvc.sys", .description="Virtual Machines Additions Service"},
    {.tag="AECi", .source="<unknown>", .description="filter object interface for MS acoustic echo canceller"},
    {.tag="Afd?", .source="afd.sys", .description="AFD objects"},
    {.tag="AfdA", .source="afd.sys", .description="Afd EA buffer"},
    {.tag="Afda", .source="afd.sys", .description="Afd APC buffer (NT 3.51 only)"},
    {.tag="AfdB", .source="afd.sys", .description="Afd data buffer"},
    {.tag="AfdC", .source="afd.sys", .description="Afd connection structure"},
    {.tag="Afdc", .source="afd.sys", .description="Afd connect data buffer"},
    {.tag="AfdD", .source="afd.sys", .description="Afd debug data"},
    {.tag="Afdd", .source="afd.sys", .description="Afd disconnect data buffer"},
    {.tag="AfdE", .source="afd.sys", .description="Afd endpoint structure"},
    {.tag="AfdF", .source="afd.sys", .description="Afd TransmitFile info"},
    {.tag="Afdf", .source="afd.sys", .description="Afd TransmitFile debug data"},
    {.tag="AfdG", .source="afd.sys", .description="Afd group table"},
    {.tag="Afdh", .source="afd.sys", .description="Afd address list change buffer"},
    {.tag="AfdI", .source="afd.sys", .description="Afd TDI data"},
    {.tag="Afdi", .source="afd.sys", .description="Afd \"set inline mode\" buffer"},
    {.tag="AfdL", .source="afd.sys", .description="Afd local address buffer"},
    {.tag="Afdl", .source="afd.sys", .description="Afd lookaside lists buffer"},
    {.tag="AfdP", .source="afd.sys", .description="Afd poll info"},
    {.tag="Afdp", .source="afd.sys", .description="Afd transport IRP buffer"},
    {.tag="AfdQ", .source="afd.sys", .description="Afd work queue item"},
    {.tag="Afdq", .source="afd.sys", .description="Afd routing query buffer"},
    {.tag="AfdR", .source="afd.sys", .description="Afd remote address buffer"},
    {.tag="Afdr", .source="afd.sys", .description="Afd ERESOURCE buffer"},
    {.tag="AfdS", .source="afd.sys", .description="Afd security info"},
    {.tag="AfdT", .source="afd.sys", .description="Afd transport info"},
    {.tag="Afdt", .source="afd.sys", .description="Afd transport address buffer"},
    {.tag="AfdW", .source="afd.sys", .description="Afd work item"},
    {.tag="AfdX", .source="afd.sys", .description="Afd context buffer"},
    {.tag="AFMM", .source="afw.sys", .description=" afwcore.sys"},
    {.tag="Afp", .source="<unknown>", .description="SFM File server"},
    {.tag="AlCI", .source="nt!alpc", .description="ALPC communication info"},
    {.tag="AlEv", .source="nt!alpc", .description="ALPC eventlog queue"},
    {.tag="AlHa", .source="nt!alpc", .description="ALPC port handle table"},
    {.tag="AlIn", .source="nt!alpc", .description="ALPC Internal allocation"},
    {.tag="AlMs", .source="nt!alpc", .description="ALPC message"},
    {.tag="ALPC", .source="nt!alpc", .description="ALPC port objects"},
    {.tag="AlRe", .source="nt!alpc", .description="ALPC section region"},
    {.tag="AlRr", .source="nt!Alpc", .description="ALPC resource reserves"},
    {.tag="AlSc", .source="nt!alpc", .description="ALPC section"},
    {.tag="AlSe", .source="nt!alpc", .description="ALPC client security"},
    {.tag="AlVi", .source="nt!alpc", .description="ALPC view"},
    {.tag="Aml*", .source="<unknown>", .description="ACPI AMLI Pooltags"},
    {.tag="AoE*", .source="aoebus.sys", .description="ATA over Ethernet driver"},
    {.tag="APIC", .source="pnpapic.sys", .description="I/O APIC Driver"},
    {.tag="ArbA", .source="nt!arb", .description="ARBITER_ALLOCATION_STATE_TAG"},
    {.tag="ArbL", .source="nt!arb", .description="ARBITER_ORDERING_LIST_TAG"},
    {.tag="ArbM", .source="nt!arb", .description="ARBITER_MISC_TAG"},
    {.tag="ArbR", .source="nt!arb", .description="ARBITER_RANGE_LIST_TAG"},
    {.tag="Arp?", .source="<unknown>", .description="ATM ARP server objects"},
    {.tag="ArpA", .source="<unknown>", .description="AtmArpS address"},
    {.tag="ArpB", .source="<unknown>", .description="AtmArpS buffer space"},
    {.tag="ARPC", .source="atmarpc.sys", .description="ATM ARP Client"},
    {.tag="ArpI", .source="<unknown>", .description="AtmArpS Interface structure"},
    {.tag="ArpK", .source="<unknown>", .description="AtmArpS ARP block"},
    {.tag="ArpM", .source="<unknown>", .description="AtmArpS MARS structure"},
    {.tag="ArpR", .source="<unknown>", .description="AtmArpS NDIS request"},
    {.tag="ArpS", .source="<unknown>", .description="AtmArpS SAP structure"},
    {.tag="Asy1", .source="<unknown>", .description="ndis / ASYNC_IOCTX_TAG"},
    {.tag="Asy2", .source="<unknown>", .description="ndis / ASYNC_INFO_TAG"},
    {.tag="Asy3", .source="<unknown>", .description="ndis / ASYNC_ADAPTER_TAG"},
    {.tag="Asy4", .source="<unknown>", .description="ndis / ASYNC_FRAME_TAG"},
    {.tag="ATac", .source="AppTag ATR command buffer", .description=""},
    {.tag="AtC", .source="<unknown>", .description="IDE disk configuration"},
    {.tag="AtD", .source="<unknown>", .description="atdisk.c"},
    {.tag="ATdi", .source="AppTag cliendata index buffer", .description=""},
    {.tag="ATdt", .source="AppTag cliendata temp buffer", .description=""},
    {.tag="ATFb", .source="AppTag file id buffer", .description=""},
    {.tag="ATgb", .source="AppTag guid buffer", .description=""},
    {.tag="ATIX", .source="<unknown>", .description="WDM mini drivers for ATI tuner"},
    {.tag="Atk", .source="<unknown>", .description="Appletalk transport"},
    {.tag="AtmA", .source="<unknown>", .description="Atoms"},
    {.tag="ATmp", .source="AppTag mount point", .description=""},
    {.tag="AtmT", .source="<unknown>", .description="Atom tables"},
    {.tag="ATMU", .source="atmuni.sys", .description="ATM UNI Call Manager"},
    {.tag="Atom", .source="<unknown>", .description="Atom Tables"},
    {.tag="ATon", .source="AppTag object name", .description=""},
    {.tag="ATub", .source="AppTag user buffer", .description=""},
    {.tag="AudC", .source="wdmaud.sys", .description="MMSYSTEM Wave/Midi API mapper"},
    {.tag="AudL", .source="wdmaud.sys", .description="MMSYSTEM Wave/Midi API mapper"},
    {.tag="AuxL", .source="<unknown>", .description="EXIFS Auxlist"},
    {.tag="Bat?", .source="<unknown>", .description="Battery Class drivers"},
    {.tag="BatC", .source="<unknown>", .description="Composite battery driver"},
    {.tag="BatM", .source="<unknown>", .description="Control method battery driver"},
    {.tag="BatS", .source="<unknown>", .description="Smart battery driver"},
    {.tag="Batt", .source="<unknown>", .description="Battery class driver"},
    {.tag="BCDK", .source="nt!init", .description="Kernel boot configuration data."},
    {.tag="BCSP", .source="bthbcsp.sys", .description="Bluetooth BCSP minidriver"},
    {.tag="BIG", .source="nt!mm", .description="Large session pool allocations (ntosexpool.c)"},
    {.tag="BlCc", .source="blkcache.sys", .description="Block Cache Driver"},
    {.tag="Bmfd", .source="<unknown>", .description="Font related stuff"},
    {.tag="BT3C", .source="bt3c.sys", .description="Bluetooth 3COM minidriver"},
    {.tag="BT8x", .source="<unknown>", .description="WDM mini drivers for Brooktree 848"},
    {.tag="BTHP", .source="bthport.sys", .description="Bluetooth port driver (generic)"},
    {.tag="BthS", .source="bthport.sys", .description="Bluetooth port driver (security)"},
    {.tag="BTME", .source="bthenum.sys", .description="Bluetooth enumerator"},
    {.tag="BTMO", .source="bthmodem.sys", .description="Bluetooth modem"},
    {.tag="BTPT", .source="<unknown>", .description="Bluetooth transport protocol library"},
    {.tag="BTSR", .source="bthser.sys", .description="Bluetooth serial minidriver"},
    {.tag="BTUR", .source="bthuart.sys", .description="Bluetooth UART minidriver"},
    {.tag="Bu*", .source="<unknown>", .description="burneng.sys from adaptec"},
    {.tag="Call", .source="nt!ex", .description="kernel callback object signature"},
    {.tag="call", .source="<unknown>", .description="debugging call tables"},
    {.tag="Cbrb", .source="nt!ExAllocateCallBack", .description="Callback registration block (PEX_CALLBACK_FUNCTION"},
    {.tag="CBRe", .source="<unknown>", .description="CallbackRegistration"},
    {.tag="Cc", .source="nt!cc", .description="Cache Manager allocations (catch"},
    {.tag="CcBc", .source="nt!cc", .description="Cache Manager Bcb from pool"},
    {.tag="CcBm", .source="nt!cc", .description="Cache Manager Bitmap"},
    {.tag="CcBn", .source="nt!cc", .description="Cache Manager Bcb trim notification entry"},
    {.tag="CcBr", .source="nt!cc", .description="Cache Manager Bitmap range"},
    {.tag="CcBz", .source="nt!cc", .description="Cache Manager Bcb Zone"},
    {.tag="CcDw", .source="nt!cc", .description="Cache Manager Deferred Write"},
    {.tag="CcEv", .source="nt!cc", .description="Cache Manager Event"},
    {.tag="CcFn", .source="nt!cc", .description="Cache Manager File name for popups"},
    {.tag="CcMb", .source="nt!cc", .description="Cache Manager Mbcb"},
    {.tag="CcOb", .source="nt!cc", .description="Cache Manager Overlap Bcb"},
    {.tag="CcPB", .source="nt!ccpf", .description="Prefetcher trace buffer"},
    {.tag="CcPC", .source="nt!ccpf", .description="Prefetcher context"},
    {.tag="CcPc", .source="nt!cc", .description="Cache Manager Private Cache Map"},
    {.tag="CcPD", .source="nt!ccpf", .description="Prefetcher trace dump"},
    {.tag="CcPF", .source="nt!ccpf", .description="Prefetcher file name"},
    {.tag="CcPf", .source="nt!ccpf", .description="Prefetcher"},
    {.tag="CcPh", .source="nt!ccpf", .description="Prefetcher header preallocation"},
    {.tag="CcPI", .source="nt!ccpf", .description="Prefetcher intermediate table"},
    {.tag="CcPL", .source="nt!ccpf", .description="Prefetcher read list"},
    {.tag="CcPM", .source="nt!ccpf", .description="Prefetcher metadata"},
    {.tag="CcPp", .source="nt!ccpf", .description="Prefetcher instructions"},
    {.tag="CcPq", .source="nt!ccpf", .description="Prefetcher query buffer"},
    {.tag="CcPS", .source="nt!ccpf", .description="Prefetcher scenario"},
    {.tag="CcPs", .source="nt!ccpf", .description="Prefetcher section table"},
    {.tag="CcPT", .source="nt!ccpf", .description="Prefetcher trace"},
    {.tag="CcPv", .source="nt!ccpf", .description="Prefetcher volume info"},
    {.tag="CcPw", .source="nt!ccpf", .description="Prefetcher boot worker"},
    {.tag="CcSc", .source="nt!cc", .description="Cache Manager Shared Cache Map"},
    {.tag="CctX", .source="<unknown>", .description="EXIFX FCB Commit CTX"},
    {.tag="CcVa", .source="nt!cc", .description="Cache Manager Initial array of Vacbs"},
    {.tag="CcVl", .source="nt!cc", .description="Cache Manager Vacb Level structures (large streams)"},
    {.tag="CcVp", .source="nt!cc", .description="Cache Manager Array of Vacb pointers for a cached stream"},
    {.tag="CcWK", .source="nt!cc", .description="Kernel Cache Manager lookaside list"},
    {.tag="CcWk", .source="nt!cc", .description="Kernel Cache Manager lookaside list"},
    {.tag="CcWq", .source="nt!cc", .description="Cache Manager Work Queue Item"},
    {.tag="CcZe", .source="nt!cc", .description="Cache Manager Buffer of Zeros"},
    {.tag="CdA", .source="<unknown>", .description="CdAudio filter driver"},
    {.tag="Cdcc", .source="cdfs.sys", .description="CDFS Ccb"},
    {.tag="Cddn", .source="cdfs.sys", .description="CDFS CdName in dirent"},
    {.tag="Cdee", .source="cdfs.sys", .description="CDFS Search expression for enumeration"},
    {.tag="Cdfd", .source="cdfs.sys", .description="CDFS Data Fcb"},
    {.tag="Cdfi", .source="cdfs.sys", .description="CDFS Index Fcb"},
    {.tag="Cdfl", .source="cdfs.sys", .description="CDFS Filelock"},
    {.tag="CdFn", .source="cdfs.sys", .description="CDFS Filename buffer"},
    {.tag="Cdfn", .source="cdfs.sys", .description="CDFS Nonpaged Fcb"},
    {.tag="Cdfs", .source="cdfs.sys", .description="CDFS General Allocation"},
    {.tag="Cdft", .source="cdfs.sys", .description="CDFS Fcb Table entry"},
    {.tag="Cdgs", .source="cdfs.sys", .description="CDFS Generated short name"},
    {.tag="Cdic", .source="cdfs.sys", .description="CDFS Irp Context"},
    {.tag="Cdil", .source="cdfs.sys", .description="CDFS Irp Context lite"},
    {.tag="Cdio", .source="cdfs.sys", .description="CDFS Io context for async reads"},
    {.tag="Cdma", .source="cdfs.sys", .description="CDFS Mcb array"},
    {.tag="Cdpe", .source="cdfs.sys", .description="CDFS Prefix Entry"},
    {.tag="CdPn", .source="cdfs.sys", .description="CDFS CdName in path entry"},
    {.tag="Cdpn", .source="cdfs.sys", .description="CDFS Prefix Entry name"},
    {.tag="CdRw", .source="dwcdrw.sys", .description="(Dvd Write Now) cdrw driver/'s default tag"},
    {.tag="Cdsp", .source="cdfs.sys", .description="CDFS Buffer for spanning path table"},
    {.tag="Cdtc", .source="cdfs.sys", .description="CDFS TOC"},
    {.tag="Cdun", .source="cdfs.sys", .description="CDFS Buffer for upcased name"},
    {.tag="Cdvd", .source="cdfs.sys", .description="CDFS Buffer for volume descriptor"},
    {.tag="Cdvp", .source="cdfs.sys", .description="CDFS Vpb allocated in filesystem"},
    {.tag="CEP", .source="wibcm.sys", .description="CEP_INSTANCE_TAG"},
    {.tag="cfsp", .source="cfosspeed.sys", .description="cFosSpeed Driver"},
    {.tag="CIcr", .source="ci.dll", .description="Code Integrity allocations for image integrity checking"},
    {.tag="CIha", .source="ci.dll", .description="Code Integrity hashes"},
    {.tag="CIsc", .source="ci.dll", .description="Code Integrity core dll"},
    {.tag="ClfA", .source="clfs.sys", .description="CLFS_CONTAINER_TAG"},
    {.tag="ClfB", .source="clfs.sys", .description="CLFS_BASEFILE_TAG"},
    {.tag="ClfC", .source="clfs.sys", .description="CLFS_LOGFCBPHYSICAL_TAG"},
    {.tag="ClfD", .source="clfs.sys", .description="CLFS_LOGFCBVIRTUAL_TAG"},
    {.tag="ClfE", .source="clfs.sys", .description="CLFS_LOGCCB_TAG"},
    {.tag="ClfF", .source="clfs.sys", .description="CLFS_FLUSHELT_TAG"},
    {.tag="ClfG", .source="clfs.sys", .description="CLFS_REQUEST_TAG"},
    {.tag="ClfH", .source="clfs.sys", .description="CLFS_IOCB_TAG"},
    {.tag="ClfI", .source="clfs.sys", .description="CLFS_MARSHALBUFFER_TAG"},
    {.tag="Clfs", .source="clfs.sys", .description="CLFS_TAG"},
    {.tag="CM", .source="nt!cm", .description="Configuration Manager (registry)"},
    {.tag="CM\x20\x20", .source="nt!cm", .description="Internal Configuration manager allocations"},
    {.tag="CM1\x20", .source="nt!cm", .description="Internal Configuration manager allocations"},
    {.tag="CM2\x20", .source="nt!cm", .description="Internal Configuration manager allocations"},
    {.tag="CM3\x20", .source="nt!cm", .description="Internal Configuration manager allocations"},
    {.tag="CM4\x20", .source="nt!cm", .description="Internal Configuration manager allocations"},
    {.tag="CM5\x20", .source="nt!cm", .description="Internal Configuration manager allocations"},
    {.tag="CM6\x20", .source="nt!cm", .description="Internal Configuration manager allocations"},
    {.tag="CM7\x20", .source="nt!cm", .description="Internal Configuration manager allocations"},
    {.tag="CM8\x20", .source="nt!cm", .description="Internal Configuration manager allocations"},
    {.tag="CM44", .source="nt!cm", .description="Internal Configuration manager allocations"},
    {.tag="CM50", .source="nt!cm", .description="Internal Configuration manager allocations"},
    {.tag="CM52", .source="nt!cm", .description="Internal Configuration manager allocations"},
    {.tag="CM53", .source="nt!cm", .description="Internal Configuration manager allocations"},
    {.tag="CMAl", .source="nt!cm", .description="internal registry memory allocator pool tag"},
    {.tag="CMCa", .source="nt!cm", .description="Configuration Manager Cache (registry)"},
    {.tag="CMcb", .source="nt!CmRegisterCallback", .description="RegistryCallback routine registration info (registration time"},
    {.tag="CmcD", .source="hal.dll", .description="HAL CMC Driver Log"},
    {.tag="CmcK", .source="hal.dll", .description="HAL CMC Kernel Log"},
    {.tag="CmcT", .source="hal.dll", .description="HAL CMC temporary Log"},
    {.tag="CMDa", .source="nt!cm", .description="value data cache pool tag"},
    {.tag="CMDc", .source="nt!cm", .description="Configuration Manager Cache (registry)"},
    {.tag="CMIn", .source="nt!cm", .description="index hint pool tag"},
    {.tag="CMkb", .source="nt!cm", .description="registry key control blocks"},
    {.tag="CMNb", .source="nt!cm", .description="notification block pool tag"},
    {.tag="CMN\xe2", .source="nt!cm", .description="notification block pool tag"},
    {.tag="CMnb", .source="nt!cm", .description="registry notify blocks"},
    {.tag="CMpa", .source="nt!cm", .description="registry post apcs"},
    {.tag="CMpb", .source="nt!cm", .description="registry post blocks"},
    {.tag="CMpe", .source="nt!cm", .description="registry post events"},
    {.tag="CMSb", .source="nt!cm", .description="internal stash buffer pool tag"},
    {.tag="CMsb", .source="nt!cm", .description="registry stash buffer"},
    {.tag="CMSc", .source="nt!cm", .description="security cache pooltag"},
    {.tag="CMSH", .source="wibcm.sys", .description="WIBCM_SHARED_TAG"},
    {.tag="CMVa", .source="nt!cm", .description="value cache value tag"},
    {.tag="CMVI", .source="nt!cm", .description="value index cache tag"},
    {.tag="CmVn", .source="nt!cm", .description="captured value name"},
    {.tag="CMVw", .source="nt!cm", .description="registry mapped view of file"},
    {.tag="CMWK", .source="wibcm.sys", .description="WIBCM_WORK_TAG"},
    {.tag="CMWT", .source="wibcm.sys", .description="WIBCM_TIMER_TAG"},
    {.tag="Cngb", .source="ksecdd.sys", .description="CNG kmode crypto pool tag"},
    {.tag="COMX", .source="serial.sys", .description="serial driver allocations"},
    {.tag="COMX", .source="vspd.sys", .description="Virtual Serial Port driver"},
    {.tag="Cont", .source="<unknown>", .description="Contiguous physical memory allocations for device drivers"},
    {.tag="CopW", .source="<unknown>", .description="EXIFS CopyOnWrite"},
    {.tag="Covr", .source="nt!cov", .description="Code Coverage pool tag"},
    {.tag="CpeD", .source="hal.dll", .description="HAL CPE Driver Log"},
    {.tag="CpeK", .source="hal.dll", .description="HAL CMC Kernel Log"},
    {.tag="CpeT", .source="hal.dll", .description="HAL CPE temporary Log"},
    {.tag="CPnp", .source="classpnp.sys", .description="ClassPnP transfer packets"},
    {.tag="Crsp", .source="ksecdd.sys", .description="CredSSP kernel mode client allocations"},
    {.tag="CrtH", .source="<unknown>", .description="EXIFS Create Header"},
    {.tag="Cryp", .source="ksecdd.sys", .description="Crypto allocations"},
    {.tag="CSdk", .source="<unknown>", .description="Cluster Disk Filter driver"},
    {.tag="CSnt", .source="<unknown>", .description="Cluster Network driver"},
    {.tag="CTE", .source="<unknown>", .description="Common transport environment (ntosinccxport.h"},
    {.tag="Cvli", .source="<unknown>", .description="EXIFS Cached Volume Info"},
    {.tag="D2d", .source="<unknown>", .description="Device Object to DosName rtns (ntos"},
    {.tag="tldev2dos.c)", .source="", .description=""},
    {.tag="D3Dd", .source="<unknown>", .description="DX D3D driver (embedded in a display driver like s3mvirge.dll)"},
    {.tag="D851", .source="<unknown>", .description="8514a video driver"},
    {.tag="Dacl", .source="<unknown>", .description="Temp allocations for object DACLs"},
    {.tag="Dati", .source="<unknown>", .description="ati video driver"},
    {.tag="DbLo", .source="<unknown>", .description="Debug logging"},
    {.tag="dcam", .source="<unknown>", .description="WDM mini driver for IEEE 1394 digital camera"},
    {.tag="Dcdd", .source="cdd.dll", .description="Canonical display driver"},
    {.tag="Dcl", .source="<unknown>", .description="cirrus video driver"},
    {.tag="Ddk", .source="<unknown>", .description="Default for driver allocated memory (user's of ntddk.h)"},
    {.tag="Devi", .source="<unknown>", .description="Device objects"},
    {.tag="Dfb", .source="<unknown>", .description="framebuf video driver"},
    {.tag="DfC?", .source="dfsc.sys", .description="DFS Client allocations"},
    {.tag="DfCa", .source="dfsc.sys", .description="DFS Client PERUSERTABLE"},
    {.tag="DfCb", .source="dfsc.sys", .description="DFS Client REFCONTEXT"},
    {.tag="DfCc", .source="dfsc.sys", .description="DFS Client CONNECTION"},
    {.tag="DfCd", .source="dfsc.sys", .description="DFS Client CURRENTDC"},
    {.tag="DfCe", .source="dfsc.sys", .description="DFS Client CSCEA"},
    {.tag="DfCf", .source="dfsc.sys", .description="DFS Client FILENAME"},
    {.tag="DfCg", .source="dfsc.sys", .description="DFS Client PREFIXCACHE"},
    {.tag="DfCh", .source="dfsc.sys", .description="DFS Client HASH"},
    {.tag="DfCi", .source="dfsc.sys", .description="DFS Client INPUTBUFFER"},
    {.tag="DfCj", .source="dfsc.sys", .description="DFS Client REWRITTENNAME"},
    {.tag="DfCl", .source="dfsc.sys", .description="DFS Client DCLIST"},
    {.tag="DfCm", .source="dfsc.sys", .description="DFS Client CMCONTEXT"},
    {.tag="DfCn", .source="dfsc.sys", .description="DFS Client DOMAINNAME"},
    {.tag="DfCp", .source="dfsc.sys", .description="DFS Client PATH"},
    {.tag="DfCq", .source="dfsc.sys", .description="DFS Client REGSTRING"},
    {.tag="DfCr", .source="dfsc.sys", .description="DFS Client REFERRAL"},
    {.tag="DfCs", .source="dfsc.sys", .description="DFS Client SHARENAME"},
    {.tag="DfCt", .source="dfsc.sys", .description="DFS Client TREECONNECT"},
    {.tag="DfCu", .source="dfsc.sys", .description="DFS Client USETABLE"},
    {.tag="DfCv", .source="dfsc.sys", .description="DFS Client SERVERNAME"},
    {.tag="DfCw", .source="dfsc.sys", .description="DFS Client TARGETINFO"},
    {.tag="DfCx", .source="dfsc.sys", .description="DFS Client CREDENTIALS"},
    {.tag="DfCy", .source="dfsc.sys", .description="DFS Client REMOTEENTRY"},
    {.tag="DfCz", .source="dfsc.sys", .description="DFS Client DOMAINREFERRAL"},
    {.tag="Dfs", .source="<unknown>", .description="Distributed File System"},
    {.tag="Dfsm", .source="<unknown>", .description="Eng event allocation (ENG_KEVENTALLOC"},
    {.tag="dfsr", .source="<unknown>", .description="RDBSS IRP allocation"},
    {.tag="dFVE", .source="dumpfve.sys", .description="Full Volume Encryption crash dump filter (Bitlocker Drive Encryption)"},
    {.tag="Dh 0", .source="<unknown>", .description="DirectDraw/3D default object"},
    {.tag="Dh 1", .source="<unknown>", .description="DirectDraw/3D DirectDraw object"},
    {.tag="Dh 2", .source="<unknown>", .description="DirectDraw/3D Surface object"},
    {.tag="Dh 3", .source="<unknown>", .description="DirectDraw/3D Direct3D context object"},
    {.tag="Dh 4", .source="<unknown>", .description="DirectDraw/3D VideoPort object"},
    {.tag="Dh 5", .source="<unknown>", .description="DirectDraw/3D MotionComp object"},
    {.tag="Dire", .source="<unknown>", .description="Directory objects"},
    {.tag="Dlck", .source="<unknown>", .description="deadlock verifier (part of driver verifier) structures"},
    {.tag="Dlmp", .source="<unknown>", .description="Video utility library for Vista display drivers"},
    {.tag="Dmga", .source="<unknown>", .description="mga (matrox) video driver"},
    {.tag="DmH?", .source="<unknown>", .description="DirectMusic hardware synthesizer"},
    {.tag="Dmio", .source="<unknown>", .description="Logical Disk Manager driver"},
    {.tag="Dmip", .source="dmio.sys", .description="Logical Disk Manager driver"},
    {.tag="Dmiq", .source="dmio.sys", .description="Logical Disk Manager driver"},
    {.tag="Dmld", .source="<unknown>", .description="Logical Disk Manager loader"},
    {.tag="DmpS", .source="dumpsvc.sys", .description="Crashdump Service Driver"},
    {.tag="DmS?", .source="<unknown>", .description="DirectMusic kernel software synthesizer"},
    {.tag="Dmst", .source="<unknown>", .description="Logical Disk Manager driver static initialization"},
    {.tag="Dndt", .source="<unknown>", .description="Device node"},
    {.tag="Dnod", .source="<unknown>", .description="Device node structure"},
    {.tag="DOPE", .source="<unknown>", .description="Device Object Power Extension (po component)"},
    {.tag="DPHk", .source="DbgPrnHk.sys", .description="DbgPrintLog//'s helper driver"},
    {.tag="DPrf", .source="<unknown>", .description="Disk performance filter driver"},
    {.tag="Dprt", .source="dxgkrnl.sys", .description="Video port for Vista display drivers"},
    {.tag="Dps5", .source="<unknown>", .description="NT5 PostScript printer driver"},
    {.tag="Dpsh", .source="<unknown>", .description="Postcript driver heap memory"},
    {.tag="Dpsi", .source="<unknown>", .description="psidisp video driver"},
    {.tag="Dpsm", .source="<unknown>", .description="Postcript driver memory"},
    {.tag="DPwr", .source="nt!pnp", .description="PnP power management"},
    {.tag="Dqv", .source="<unknown>", .description="qv (qvision) video driver"},
    {.tag="Driv", .source="<unknown>", .description="Driver objects"},
    {.tag="Drsd", .source="<unknown>", .description="Rasdd Printer Driver Pool Tag."},
    {.tag="Dtga", .source="<unknown>", .description="tga video driver"},
    {.tag="Dump", .source="<unknown>", .description="Bugcheck dump allocations"},
    {.tag="Dun5", .source="<unknown>", .description="NT5 Universal printer driver"},
    {.tag="DUQD", .source="mpsdrv.sys", .description="MPSDRV upcall user request"},
    {.tag="DV??", .source="<unknown>", .description="RDR2 DAV MiniRedir Tags"},
    {.tag="DVCx", .source="<unknown>", .description="AsyncEngineContext"},
    {.tag="DVEx", .source="<unknown>", .description="Exchange"},
    {.tag="DVFi", .source="<unknown>", .description="FileInfo"},
    {.tag="DVFn", .source="<unknown>", .description="FileName"},
    {.tag="Dvg2", .source="<unknown>", .description="vga 256 color video driver"},
    {.tag="Dvg6", .source="<unknown>", .description="vga 64K color video driver"},
    {.tag="Dvga", .source="<unknown>", .description="vga 16 color video driver"},
    {.tag="Dvgr", .source="<unknown>", .description="vga for risc video driver"},
    {.tag="DVRw", .source="<unknown>", .description="ReadWrite"},
    {.tag="DVSc", .source="<unknown>", .description="SrvCall"},
    {.tag="DVSh", .source="<unknown>", .description="SharedHeap"},
    {.tag="DW32", .source="<unknown>", .description="W32 video driver"},
    {.tag="Dwd", .source="<unknown>", .description="wd90c24a video driver"},
    {.tag="DWNb", .source="dwudf.sys", .description="(DVD Write Now) I/O buffers and data verification request block"},
    {.tag="DWNf", .source="dwudf.sys", .description="(DVD Write Now) default allocation without internal bounds checker"},
    {.tag="dwnF", .source="dwudf.sys", .description="(DVD Write Now) default tag"},
    {.tag="DWNm", .source="dwudf.sys", .description="(DVD Write Now) pending verification bitmap "},
    {.tag="DWNm", .source="dwudf.sys", .description="(DVD Write Now) default allocation tag when built-in memory manager is enabled"},
    {.tag="dwnS", .source="dwudf.sys", .description="(DVD Write Now) //'system//' memory allocation"},
    {.tag="DWNz", .source="dwudf.sys", .description="(DVD Write Now) Zero-filled buffer"},
    {.tag="Dwp9", .source="<unknown>", .description="weitekp9 video driver"},
    {.tag="DWvb", .source="dwudf.sys", .description="(DVD Write Now) stored data verification block"},
    {.tag="Dxga", .source="<unknown>", .description="XGA video driver"},
    {.tag="DxgK", .source="dxgkrnl.sys", .description="Vista display driver support"},
    {.tag="Efsc", .source="<unknown>", .description="EFS driver"},
    {.tag="Efsm", .source="<unknown>", .description="EFS driver"},
    {.tag="Efst", .source="<unknown>", .description="EXIFS FS Statistics"},
    {.tag="Enli", .source="nt!tm", .description="KTM Transaction Enlistment"},
    {.tag="Envr", .source="<unknown>", .description="Environment strings"},
    {.tag="Err", .source="<unknown>", .description="Error strings"},
    {.tag="EtwA", .source="nt!etw", .description="Etw APC"},
    {.tag="EtwB", .source="nt!etw", .description="Etw Buffer"},
    {.tag="EtwC", .source="nt!etw", .description="Etw Realtime Consumer"},
    {.tag="EtwD", .source="nt!etw", .description="Etw DataBlock"},
    {.tag="EtwG", .source="nt!etw", .description="Etw Guid"},
    {.tag="EtwL", .source="nt!etw", .description="ETW_LOGGER_CONTEXT"},
    {.tag="EtwP", .source="nt!etw", .description="Etw Pool"},
    {.tag="Etwp", .source="nt!etw", .description="ETW per"},
    {.tag="EtwQ", .source="nt!etw", .description="Etw Queue"},
    {.tag="Etwq", .source="nt!etw", .description="Etw ReplyQueue"},
    {.tag="EtwR", .source="nt!etw", .description="Etw Registration"},
    {.tag="Etwr", .source="nt!etw", .description="Etw ReplyQueue Entry"},
    {.tag="EtwS", .source="nt!etw", .description="Etw DataSource"},
    {.tag="Evel", .source="<unknown>", .description="EFS file system filter driver lookaside list"},
    {.tag="Even", .source="<unknown>", .description="Event objects"},
    {.tag="Eve\xee", .source="<unknown>", .description="Event objects"},
    {.tag="Evid", .source="<unknown>", .description="Rtl Event ID's"},
    {.tag="ExWl", .source="<unknown>", .description="Executive worker list entry"},
    {.tag="Fat", .source="fastfat.sys", .description="Fat File System allocations"},
    {.tag="FatB", .source="fastfat.sys", .description="Fat allocation bitmaps"},
    {.tag="Fatb", .source="fastfat.sys", .description="Fat Bcb arrays"},
    {.tag="FatC", .source="fastfat.sys", .description="Fat Ccbs"},
    {.tag="FatD", .source="fastfat.sys", .description="Fat pool dirents"},
    {.tag="Fatd", .source="fastfat.sys", .description="Fat EA data"},
    {.tag="FatE", .source="fastfat.sys", .description="Fat EResources"},
    {.tag="Fate", .source="fastfat.sys", .description="Fat EA set headers"},
    {.tag="FatF", .source="fastfat.sys", .description="Fat Fcbs"},
    {.tag="Fatf", .source="fastfat.sys", .description="Fat deferred flush contexts"},
    {.tag="FatI", .source="fastfat.sys", .description="Fat IrpContexts"},
    {.tag="Fati", .source="fastfat.sys", .description="Fat IO run descriptor"},
    {.tag="FatL", .source="fastfat.sys", .description="Fat FAT entry lookup buffer on verify"},
    {.tag="FatN", .source="fastfat.sys", .description="Fat Nonpaged Fcbs"},
    {.tag="Fatn", .source="fastfat.sys", .description="Fat filename buffer"},
    {.tag="FatO", .source="fastfat.sys", .description="Fat I/O buffer"},
    {.tag="FatP", .source="fastfat.sys", .description="Fat output for query retrieval pointers (caller frees)"},
    {.tag="FatQ", .source="fastfat.sys", .description="Fat buffered user buffer"},
    {.tag="FatR", .source="fastfat.sys", .description="Fat repinned Bcb"},
    {.tag="Fatr", .source="fastfat.sys", .description="Fat verification"},
    {.tag="FatS", .source="fastfat.sys", .description="Fat stashed Bpb"},
    {.tag="Fats", .source="fastfat.sys", .description="Fat verification"},
    {.tag="FatT", .source="fastfat.sys", .description="Fat directory allocation bitmaps"},
    {.tag="FatV", .source="fastfat.sys", .description="Fat Vcb stat bucket"},
    {.tag="Fatv", .source="fastfat.sys", .description="Fat backpocket Vpb"},
    {.tag="FatW", .source="fastfat.sys", .description="Fat FAT windowing structure"},
    {.tag="FatX", .source="fastfat.sys", .description="Fat IO contexts"},
    {.tag="Fatx", .source="fastfat.sys", .description="Fat delayed close contexts"},
    {.tag="fboX", .source="<unknown>", .description="EXIFS FOBXVF List"},
    {.tag="Fcbl", .source="<unknown>", .description="EXIFS FCBlock"},
    {.tag="FhCI", .source="substvol.sys", .description="(AllenPort Virtual Volume) file handle cache item"},
    {.tag="FIcn", .source="fileinfo.sys", .description="FileInfo FS"},
    {.tag="FIcp", .source="fileinfo.sys", .description="FileInfo FS"},
    {.tag="FIcs", .source="fileinfo.sys", .description="FileInfo FS"},
    {.tag="FIcv", .source="fileinfo.sys", .description="FileInfo FS"},
    {.tag="File", .source="<unknown>", .description="File objects"},
    {.tag="Fil\xe5", .source="<unknown>", .description="File objects"},
    {.tag="FIOc", .source="fileinfo.sys", .description="FileInfo FS"},
    {.tag="FIof", .source="fileinfo.sys", .description="FileInfo FS"},
    {.tag="FIou", .source="fileinfo.sys", .description="FileInfo FS"},
    {.tag="FIPc", .source="fileinfo.sys", .description="FileInfo FS"},
    {.tag="FIvn", .source="fileinfo.sys", .description="FileInfo FS"},
    {.tag="FIvp", .source="fileinfo.sys", .description="FileInfo FS"},
    {.tag="FLex", .source="<unknown>", .description="exclusive file lock"},
    {.tag="FLfl", .source="<unknown>", .description="exported (non"},
    {.tag="FLli", .source="<unknown>", .description="per"},
    {.tag="FLln", .source="<unknown>", .description="shared lock tree node"},
    {.tag="flnk", .source="<unknown>", .description="font link tag used in ntgdigre"},
    {.tag="Flop", .source="<unknown>", .description="floppy driver"},
    {.tag="Flop", .source="flopx.sys", .description="Alter//'s Floppy driver with non-standard format support (e.g. 1"},
    {.tag="FLsh", .source="<unknown>", .description="shared file lock"},
    {.tag="Flst", .source="<unknown>", .description="EXIFS Freelist"},
    {.tag="FLwl", .source="<unknown>", .description="waiting lock"},
    {.tag="FM??", .source="fltmgr.sys", .description="Unrecognized FltMgr tag (update pooltag.w)"},
    {.tag="FMac", .source="fltmgr.sys", .description="ASCII String buffers"},
    {.tag="FMas", .source="fltmgr.sys", .description="ASYNC_IO_COMPLETION_CONTEXT structure"},
    {.tag="FMcb", .source="fltmgr.sys", .description="FLT_CCB structure"},
    {.tag="FMcr", .source="fltmgr.sys", .description="Context registration structures"},
    {.tag="FMct", .source="fltmgr.sys", .description="TRACK_COMPLETION_NODES structure"},
    {.tag="FMdl", .source="fltmgr.sys", .description="Array of DEVICE_OBJECT pointers"},
    {.tag="FMea", .source="fltmgr.sys", .description="EA buffer for create"},
    {.tag="FMfc", .source="fltmgr.sys", .description="FLTMGR_FILE_OBJECT_CONTEXT structure"},
    {.tag="FMfi", .source="fltmgr.sys", .description="Fast IO dispatch table"},
    {.tag="FMfk", .source="fltmgr.sys", .description="Byte Range Lock structure"},
    {.tag="FMfl", .source="fltmgr.sys", .description="FLT_FILTER structure"},
    {.tag="FMfn", .source="fltmgr.sys", .description="NAME_CACHE_NODE structure"},
    {.tag="FMfr", .source="fltmgr.sys", .description="FLT_FRAME structure"},
    {.tag="FMfz", .source="fltmgr.sys", .description="FILE_LIST_CTRL structure"},
    {.tag="FMib", .source="fltmgr.sys", .description="Irp SYSTEM buffers"},
    {.tag="FMic", .source="fltmgr.sys", .description="IRP_CTRL completion node stack"},
    {.tag="FMil", .source="fltmgr.sys", .description="IRP_CTRL completion node stack"},
    {.tag="FMin", .source="fltmgr.sys", .description="FLT_INSTANCE name"},
    {.tag="FMis", .source="fltmgr.sys", .description="FLT_INSTANCE structure"},
    {.tag="FMla", .source="fltmgr.sys", .description="Per"},
    {.tag="FMnc", .source="fltmgr.sys", .description="NAME_CACHE_CREATE_CTRL structure"},
    {.tag="FMng", .source="fltmgr.sys", .description="NAME_GENERATION_CONTEXT structure"},
    {.tag="FMol", .source="fltmgr.sys", .description="OPLOCK_CONTEXT structure"},
    {.tag="FMos", .source="fltmgr.sys", .description="Operation status ctrl structure"},
    {.tag="FMpl", .source="fltmgr.sys", .description="Cache aware pushLock"},
    {.tag="FMpr", .source="fltmgr.sys", .description="FLT_PRCB structure"},
    {.tag="FMrl", .source="fltmgr.sys", .description="FLT_OBJECT rundown logs"},
    {.tag="FMrp", .source="fltmgr.sys", .description="Reparse point data buffer"},
    {.tag="FMrr", .source="fltmgr.sys", .description="Per"},
    {.tag="FMsd", .source="fltmgr.sys", .description="Security descriptors"},
    {.tag="FMsl", .source="fltmgr.sys", .description="STREAM_LIST_CTRL structure"},
    {.tag="FMtn", .source="fltmgr.sys", .description="Temporary file names"},
    {.tag="FMtr", .source="fltmgr.sys", .description="Temporary Registry information"},
    {.tag="FMts", .source="fltmgr.sys", .description="Tree Stack"},
    {.tag="FMus", .source="fltmgr.sys", .description="Unicode string"},
    {.tag="FMvf", .source="fltmgr.sys", .description="FLT_VERIFIER_EXTENSION structure"},
    {.tag="FMvj", .source="fltmgr.sys", .description="FLT_VERIFIER_OBJECT structure"},
    {.tag="FMvo", .source="fltmgr.sys", .description="FLT_VOLUME structure"},
    {.tag="FMwi", .source="fltmgr.sys", .description="Work item structures"},
    {.tag="FOCX", .source="nt!fsrtl", .description="File System Run Time File Object Context structure"},
    {.tag="FS??", .source="nt!fsrtl", .description="Unrecoginzed File System Run Time allocations (update pooltag.w)"},
    {.tag="FSeh", .source="nt!fsrtl", .description="File System Run Time Extra Create Parameter Entry"},
    {.tag="FSel", .source="nt!fsrtl", .description="File System Run Time Extra Create Parameter List"},
    {.tag="FSfm", .source="nt!fsrtl", .description="File System Run Time Fast Mutex Lookaside List"},
    {.tag="FSim", .source="nt!fsrtl", .description="File System Run Time Mcb Initial Mapping Lookaside List"},
    {.tag="FSmg", .source="nt!fsrtl", .description="File System Run Time"},
    {.tag="Fsrc", .source="fsrec.sys", .description="Filesystem recognizer (fsrec.sys)"},
    {.tag="FSrd", .source="nt!fsrtl", .description="File System Run Time"},
    {.tag="FSrm", .source="nt!fsrtl", .description="File System Run Time"},
    {.tag="FSrN", .source="nt!fsrtl", .description="File System Run Time"},
    {.tag="FSrn", .source="nt!fsrtl", .description="File System Run Time"},
    {.tag="FSro", .source="nt!fsrtl", .description="File System Run Time"},
    {.tag="FSrs", .source="nt!fsrtl", .description="File System Run Time Work Item for low"},
    {.tag="FSrt", .source="nt!fsrtl", .description="File System Run Time allocations (DO NOT USE!)"},
    {.tag="FstB", .source="<unknown>", .description="ntosfstub"},
    {.tag="Fstb", .source="<unknown>", .description="ntosfstub"},
    {.tag="FSun", .source="nt!fsrtl", .description="File System Run Time"},
    {.tag="FsVg", .source="fsvga.sys", .description="International VGA support"},
    {.tag="FtC", .source="<unknown>", .description="Fault tolerance driver"},
    {.tag="FtM", .source="<unknown>", .description="Fault tolerance driver"},
    {.tag="FtpA", .source="mpsdrv.sys", .description="MPSDRV FTP protocol analyzer"},
    {.tag="FTrc", .source="<unknown>", .description="Fault tolerance Slist tag."},
    {.tag="FtS", .source="<unknown>", .description="Fault tolerance driver"},
    {.tag="FtT", .source="<unknown>", .description="Fault tolerance driver"},
    {.tag="FtU", .source="<unknown>", .description="Fault tolerance driver"},
    {.tag="FtV", .source="<unknown>", .description="Fault tolerance driver"},
    {.tag="FVE0", .source="fvevol.sys", .description="General allocations"},
    {.tag="FVE?", .source="fvevol.sys", .description="Full Volume Encryption Filter Driver (Bitlocker Drive Encryption)"},
    {.tag="FVEc", .source="fvevol.sys", .description="Cryptographic allocations"},
    {.tag="FVEl", .source="fvevol.sys", .description="FVELIB allocations"},
    {.tag="FVEp", .source="fvevol.sys", .description="Write buffers"},
    {.tag="FVEr", .source="fvevol.sys", .description="Reserved mapping addresses"},
    {.tag="FVEv", .source="fvevol.sys", .description="Conversion allocations"},
    {.tag="FVEw", .source="fvevol.sys", .description="Worker threads"},
    {.tag="FVEx", .source="fvevol.sys", .description="Read/write control structures"},
    {.tag="FwfD", .source="mpsdrv.sys", .description="MPSDRV driver buffer for flattening NET_BUFFFER"},
    {.tag="Fwpp", .source="fwpkclnt.sys", .description="Windows Filtering Platform export driver."},
    {.tag="FxDr", .source="wdf01000.sys", .description="KMDF driver globals/generic pool allocation tag. Fallback tag in case driver tag is unusable."},
    {.tag="FxL?", .source="wdfldr.sys", .description="KMDF Loader Pool allocation"},
    {.tag="FxLg", .source="wdf01000.sys", .description="KMDF IFR log tag"},
    {.tag="G", .source="<unknown>", .description="Gdi Generic allocations"},
    {.tag="G???", .source="<unknown>", .description="Gdi Objects"},
    {.tag="Gcac", .source="<unknown>", .description="Gdi glyph cache"},
    {.tag="Gcap", .source="<unknown>", .description="Gdi capture buffer"},
    {.tag="Gcsl", .source="<unknown>", .description="Gdi string resource script names"},
    {.tag="Gdbr", .source="<unknown>", .description="Gdi driver brush realization"},
    {.tag="Gdd", .source="<unknown>", .description="Gdi ddraw PKEY_VALUE_FULL_INFORMATION"},
    {.tag="Gdda", .source="<unknown>", .description="Gdi ddraw attach list"},
    {.tag="GddD", .source="<unknown>", .description="Gdi ddraw dummy page"},
    {.tag="Gdde", .source="<unknown>", .description="Gdi ddraw event"},
    {.tag="Gddf", .source="<unknown>", .description="Gdi ddraw driver heaps"},
    {.tag="Gddp", .source="<unknown>", .description="Gdi ddraw driver caps"},
    {.tag="Gddv", .source="<unknown>", .description="Gdi ddraw driver video memory list"},
    {.tag="GDev", .source="<unknown>", .description="Gdi pdev"},
    {.tag="Gdev", .source="<unknown>", .description="Gdi GDITAG_DEVMODE"},
    {.tag="Gdrs", .source="<unknown>", .description="Gdi GDITAG_DRVSUP"},
    {.tag="Gdwd", .source="win32k.sys", .description="Gdi watchdog support objects"},
    {.tag="Gdxd", .source="<unknown>", .description="Gdi ddraw VPE directdraw object"},
    {.tag="Gdxs", .source="<unknown>", .description="Gdi ddraw VPE surface"},
    {.tag="Gdxx", .source="<unknown>", .description="Gdi ddraw VPE DXAPI object"},
    {.tag="Gebr", .source="<unknown>", .description="Gdi ENGBRUSH"},
    {.tag="gEdg", .source="<unknown>", .description="Gdi gradient fill triangle"},
    {.tag="Gfcb", .source="<unknown>", .description="EXIFS Grow FCB"},
    {.tag="Gffv", .source="<unknown>", .description="Gdi FONTFILEVIEW"},
    {.tag="GFil", .source="<unknown>", .description="Gdi engine descriptor list"},
    {.tag="gFil", .source="<unknown>", .description="Gdi FILEVIEW"},
    {.tag="Gfsb", .source="<unknown>", .description="Gdi font sustitution list"},
    {.tag="Gfsm", .source="<unknown>", .description="Gdi Fast mutex"},
    {.tag="Ggb", .source="<unknown>", .description="Gdi glyph bits"},
    {.tag="Ggbl", .source="<unknown>", .description="Gdi look aside buffers"},
    {.tag="Ggdv", .source="<unknown>", .description="Gdi GDITAG_GDEVICE"},
    {.tag="Gglb", .source="<unknown>", .description="Gdi temp buffer"},
    {.tag="Ggls", .source="<unknown>", .description="Gdi glyphset"},
    {.tag="Gh ?", .source="win32k.sys", .description="Gdi Handle manager specific object types: defined in w32/ntgdiinc/ntgdistr.h"},
    {.tag="Ghmg", .source="<unknown>", .description="Gdi handle manager objects"},
    {.tag="Gini", .source="<unknown>", .description="Gdi fast mutex"},
    {.tag="Gla?", .source="win32k.sys", .description="Gdi handle manager specific object types allocated from lookaside memory: defined in w32/ntgdiinc/ntgdistr.h"},
    {.tag="Gldv", .source="<unknown>", .description="Gdi Ldev"},
    {.tag="Glnk", .source="<unknown>", .description="Gdi PFELINK"},
    {.tag="Gmap", .source="<unknown>", .description="Gdi font map signature table"},
    {.tag="Gpff", .source="<unknown>", .description="Gdi physical font file"},
    {.tag="Gpft", .source="<unknown>", .description="Gdi font table"},
    {.tag="Gsem", .source="<unknown>", .description="Gdi Semaphores"},
    {.tag="Gsp", .source="<unknown>", .description="Gdi sprite"},
    {.tag="Gspr", .source="<unknown>", .description="Gdi sprite grow range"},
    {.tag="Gtmp", .source="<unknown>", .description="Gdi temporary allocations"},
    {.tag="Gtmw", .source="<unknown>", .description="Gdi TMW_INTERNAL"},
    {.tag="Gxlt", .source="<unknown>", .description="Gdi Xlate"},
    {.tag="Hal", .source="hal.dll", .description="Hardware Abstraction Layer"},
    {.tag="HalV", .source="ntoskrnl.exe", .description="Driver Verifier DMA checking"},
    {.tag="HcBm", .source="hcaport.sys", .description="HCAPORT_TAG_BITMAP"},
    {.tag="HcCm", .source="hcaport.sys", .description="HCAPORT_TAG_CM"},
    {.tag="HcCq", .source="hcaport.sys", .description="HCAPORT_TAG_CQUEUE"},
    {.tag="HcdI", .source="hcaport.sys", .description="HCAPORT_TAG_HWID"},
    {.tag="HcDr", .source="hcaport.sys", .description="HCAPORT_TAG_DEVICE_RELATIONS"},
    {.tag="HcEn", .source="hcaport.sys", .description="HCAPORT_TAG_ENUM"},
    {.tag="HcEv", .source="hcaport.sys", .description="HCAPORT_TAG_EVENT"},
    {.tag="HCID", .source="bthport.sys", .description="Bluetooth port driver HCI debug"},
    {.tag="HCIT", .source="bthport.sys", .description="Bluetooth port driver (HCI)"},
    {.tag="HcMa", .source="hcaport.sys", .description="HCAPORT_TAG_MAD"},
    {.tag="HcMc", .source="hcaport.sys", .description="HCAPORT_TAG_MISC"},
    {.tag="HcMp", .source="hcaport.sys", .description="HCAPORT_TAG_MINIPORT"},
    {.tag="HcMr", .source="hcaport.sys", .description="HCAPORT_TAG_REMOVE_LOCK"},
    {.tag="HcOb", .source="hcaport.sys", .description="HCAPORT_TAG_OBJECT"},
    {.tag="HcPr", .source="hcaport.sys", .description="HCAPORT_TAG_PROTD"},
    {.tag="HcRs", .source="hcaport.sys", .description="HCAPORT_TAG_RESOURCE_LIST"},
    {.tag="HcUc", .source="hcaport.sys", .description="HCAPORT_TAG_UCONTEXT"},
    {.tag="HdCl", .source="<unknown>", .description="HID Client Sample Driver"},
    {.tag="HidC", .source="<unknown>", .description="HID Class"},
    {.tag="HidP", .source="<unknown>", .description="HID Parser"},
    {.tag="Hioc", .source="hcaport.sys", .description="HCAPORT_TAG_IOC_SERVICE_TABLE"},
    {.tag="HisC", .source="<unknown>", .description="histogram filter driver"},
    {.tag="Hist", .source="<unknown>", .description="histogram filter driver"},
    {.tag="Hmgo", .source="hcaport.sys", .description="HCAPORT_TAG_WQ_MG_INFO"},
    {.tag="Hpfs", .source="<unknown>", .description="Pinball (aka Hpfs) allocations"},
    {.tag="HPmi", .source="hcaport.sys", .description="HCAPORT_TAG_PMI_EXTENSION"},
    {.tag="HpMM", .source="pnpmem.sys", .description="HotPlug Memory Driver"},
    {.tag="hSVD", .source="mrxdav.sys", .description="Shared Heap Tag"},
    {.tag="HT01", .source="<unknown>", .description="GDI Halftone AddCachedDCI() for CurCDCIData"},
    {.tag="HT02", .source="<unknown>", .description="GDI Halftone GetCachedDCI() for Threshold"},
    {.tag="HT03", .source="<unknown>", .description="GDI Halftone FindCachedSMP() for CurCSMPData"},
    {.tag="HT04", .source="<unknown>", .description="GDI Halftone FindCachedSMP() for CurCSMPBmp"},
    {.tag="HT05", .source="<unknown>", .description="GDI Halftone HT_CreateDeviceHalftoneInfo() for HT_DHI"},
    {.tag="HT06", .source="<unknown>", .description="GDI Halftone pDCIAdjClr() for DEVCLRADJ"},
    {.tag="HT07", .source="<unknown>", .description="GDI Halftone ComputeRGB555LUT() for RGBLUT"},
    {.tag="HT08", .source="<unknown>", .description="GDI Halftone ColorTriadSrcToDev() for RGB"},
    {.tag="HT09", .source="<unknown>", .description="GDI Halftone ColorTriadSrcToDev() for CRTX"},
    {.tag="HT10", .source="<unknown>", .description="GDI Halftone CreateDyesColorMappingTable() for DevPrims"},
    {.tag="HT11", .source="<unknown>", .description="GDI Halftone CreateDyesColorMappingTable() for DyeMappingTable"},
    {.tag="HT12", .source="<unknown>", .description="GDI Halftone ThresholdsFromYData() for pYData"},
    {.tag="HT13", .source="<unknown>", .description="GDI Halftone ComputeHTCellRegress() for pThresholds"},
    {.tag="HT14", .source="<unknown>", .description="GDI Halftone CalculateStretch() for InputSI/pSrcMaskLine"},
    {.tag="HT15", .source="<unknown>", .description="GDI Halftone CalculateStretch() for PrimColorInfo"},
    {.tag="Hvlm", .source="nt!Hvl", .description="Temporary MDL for the Hvl component."},
    {.tag="HvlP", .source="nt!Hvl", .description="Hypercall marshalling pages for the Hvl component."},
    {.tag="IBCM", .source="wibcm.sys", .description="CM_INSTANCE_TAG Windows Infiniband Communications Manager"},
    {.tag="IBm*", .source="wibms.sys", .description="Windows Infiniband Management Server pool tags"},
    {.tag="IbPA", .source="wibpm.sys", .description="WIBPM_SAMPLE_TAG"},
    {.tag="IbPI", .source="wibpm.sys", .description="WIBPM_ITEM_TAG"},
    {.tag="IbPm", .source="wibpm.sys", .description="WIBPM_TAG Windows Infiniband Performance Manager"},
    {.tag="IbPS", .source="wibpm.sys", .description="WIBPM_SENT_TAG"},
    {.tag="IbW0", .source="wibwmi.sys", .description="WIBWMI0_TAG Windows Infiniband WMI Manager"},
    {.tag="IbW1", .source="wibwmi.sys", .description="WIBWMI1_TAG"},
    {.tag="IbW2", .source="wibwmi.sys", .description="WIBWMI2_TAG"},
    {.tag="Icp", .source="<unknown>", .description="I/O completion packets queue on a completion ports"},
    {.tag="IcpP", .source="<unknown>", .description="NPAGED_LOOKASIDE_LIST I/O completion per processor lookaside pointers"},
    {.tag="ICSo", .source="substvol.sys", .description="(AllenPort Virtual Volume) SectionObject cache"},
    {.tag="IdeP", .source="<unknown>", .description="atapi IDE"},
    {.tag="IdeX", .source="<unknown>", .description="PCI IDE"},
    {.tag="idle", .source="<unknown>", .description="Power Manager idle handler"},
    {.tag="Ifs", .source="<unknown>", .description="Default file system allocations (user's of ntifs.h)"},
    {.tag="II??", .source="<unknown>", .description="IP in IP tunneling"},
    {.tag="IIdt", .source="<unknown>", .description="Data"},
    {.tag="IIhd", .source="<unknown>", .description="Header"},
    {.tag="IIpk", .source="<unknown>", .description="Packet"},
    {.tag="IIrf", .source="<unknown>", .description="Free memory"},
    {.tag="IIsc", .source="<unknown>", .description="Send Context"},
    {.tag="IITn", .source="<unknown>", .description="Tunnel"},
    {.tag="IIts", .source="<unknown>", .description="Transfer Context"},
    {.tag="IIwc", .source="<unknown>", .description="Work Context"},
    {.tag="Im*", .source="<unknown>", .description="Imapi.sys from adaptec"},
    {.tag="Info", .source="<unknown>", .description="general system information allocations"},
    {.tag="INTC", .source="<unknown>", .description="Intel video driver"},
    {.tag="INty", .source="substvol.sys", .description="(AllenPort Virtual Volume) file notification item"},
    {.tag="Io", .source="nt!io", .description="general IO allocations"},
    {.tag="Io\x20\x20", .source="nt!io", .description="general IO allocations"},
    {.tag="IoCc", .source="nt!io", .description="Io completion context"},
    {.tag="IoEa", .source="nt!io", .description="Io extended attributes"},
    {.tag="IoEr", .source="nt!io", .description="Io error log packets"},
    {.tag="IoFc", .source="nt!io", .description="Io name transmogrify operation"},
    {.tag="IOfl", .source="substvol.sys", .description="(AllenPort Virtual Volume) offline file descriptor"},
    {.tag="IoFs", .source="nt!io", .description="Io shutdown packet"},
    {.tag="IoFu", .source="nt!pnp", .description="Io file utils"},
    {.tag="Ioin", .source="<unknown>", .description="Io interrupts"},
    {.tag="IoKB", .source="<unknown>", .description="Registry basic key block (temp allocation)"},
    {.tag="IoNm", .source="nt!io", .description="Io parsing names"},
    {.tag="IoOp", .source="nt!io", .description="I/O subsystem open packet"},
    {.tag="IoRb", .source="nt!io", .description="Io remote boot related"},
    {.tag="IoRi", .source="nt!io", .description="I/O SubSystem Driver Reinitialization Callback Packet"},
    {.tag="IoRN", .source="nt!io", .description="Registry key name (temp allocation)"},
    {.tag="IoSe", .source="nt!io", .description="Io security related"},
    {.tag="IoSh", .source="nt!io", .description="Io shutdown packet"},
    {.tag="IoSt", .source="nt!io", .description="Io Stream Identifier Context"},
    {.tag="IoTi", .source="nt!io", .description="Io timers"},
    {.tag="IoTt", .source="nt!vf", .description="I/O verifier IRP tracking table"},
    {.tag="IoUs", .source="nt!io", .description="I/O SubSystem completion Context Allocation"},
    {.tag="Ip??", .source="ipsec.sys", .description="IP Security"},
    {.tag="IpAT", .source="ipsec.sys", .description="AH headers in transport mode"},
    {.tag="IpAU", .source="ipsec.sys", .description="AH headers in tunnel mode"},
    {.tag="IpAX", .source="ipsec.sys", .description="Key acquire contexts"},
    {.tag="IpBP", .source="ipsec.sys", .description="buffer pools"},
    {.tag="IpCO", .source="ipsec.sys", .description="IP compression"},
    {.tag="IpEQ", .source="ipsec.sys", .description="event queue"},
    {.tag="IpET", .source="ipsec.sys", .description="ESP headers in transport mode"},
    {.tag="IpEU", .source="ipsec.sys", .description="ESP headers in tunnel mode"},
    {.tag="IpFI", .source="ipsec.sys", .description="Filter blocks"},
    {.tag="IpFl", .source="mpsdrv.sys", .description="MPSDRV IP Flow"},
    {.tag="IpHT", .source="ipsec.sys", .description="HUGHES headers in transport mode"},
    {.tag="IpHU", .source="ipsec.sys", .description="HUGHES headers in tunnel mode"},
    {.tag="IpHW", .source="ipsec.sys", .description="hardware accleration items"},
    {.tag="IpKE", .source="ipsec.sys", .description="keys"},
    {.tag="IpLA", .source="ipsec.sys", .description="lookaside lists"},
    {.tag="IPm?", .source="<unknown>", .description="IP Multicasting"},
    {.tag="IPmf", .source="<unknown>", .description="Free memory (only in checked builds)"},
    {.tag="IPmg", .source="<unknown>", .description="Group"},
    {.tag="IPmm", .source="<unknown>", .description="Message"},
    {.tag="IPmo", .source="<unknown>", .description="Outgoing Interface"},
    {.tag="IPms", .source="<unknown>", .description="Source"},
    {.tag="IpSA", .source="ipsec.sys", .description="Security Associations"},
    {.tag="IpSC", .source="ipsec.sys", .description="send complete context"},
    {.tag="IpSI", .source="ipsec.sys", .description="initial allocations"},
    {.tag="IpSQ", .source="ipsec.sys", .description="stall queues"},
    {.tag="IpTI", .source="ipsec.sys", .description="timers"},
    {.tag="IPX", .source="<unknown>", .description="Nwlnkipx transport"},
    {.tag="IrD?", .source="<unknown>", .description="IrDA TDI and RAS drivers"},
    {.tag="Irp", .source="<unknown>", .description="Io"},
    {.tag="Irp\x20", .source="<unknown>", .description="Io"},
    {.tag="Irp+", .source="nt!vf", .description="I/O verifier allocated IRP packets"},
    {.tag="IrpB", .source="nt!vf", .description="I/O verifier direct I/O double buffer allocation"},
    {.tag="IrpC", .source="nt!vf", .description="I/O verifier stack contexts"},
    {.tag="Irpd", .source="nt!vf", .description="I/O verifier deferred completion context"},
    {.tag="Irpl", .source="nt!io", .description="system large IRP lookaside list"},
    {.tag="Irps", .source="nt!io", .description="system small IRP lookaside list"},
    {.tag="Irpt", .source="nt!vf", .description="I/O verifier per"},
    {.tag="Isap", .source="<unknown>", .description="Pnp Isa bus extender"},
    {.tag="IU??", .source="<unknown>", .description="IIS Utility Driver"},
    {.tag="IUcp", .source="<unknown>", .description="completion port minipackets"},
    {.tag="IUDl", .source="<unknown>", .description="Lookaside list allocations"},
    {.tag="KAPC", .source="nt!io", .description="I/O SubSystem HardError APC"},
    {.tag="KbdC", .source="<unknown>", .description="Keyboard Class Driver"},
    {.tag="KCfe", .source="<unknown>", .description="Kernel COM factory entry"},
    {.tag="Ke", .source="<unknown>", .description="Kernel data structures"},
    {.tag="KeIC", .source="<unknown>", .description="Kernel Interrupt Object Chain"},
    {.tag="Key", .source="<unknown>", .description="Key objects"},
    {.tag="Key\xa0", .source="<unknown>", .description="Key objects"},
    {.tag="KMIX", .source="<unknown>", .description="Kmixer (wdm audio)"},
    {.tag="KNMI", .source="<unknown>", .description="Kernel NMI Callback object"},
    {.tag="KrbC", .source="ksecdd.sys", .description="Kerberos Client package"},
    {.tag="KSah", .source="<unknown>", .description="Ks auxiliary stream headers"},
    {.tag="KSAI", .source="<unknown>", .description="allocator instance"},
    {.tag="KSai", .source="<unknown>", .description="default allocator instance header"},
    {.tag="KSbi", .source="<unknown>", .description="event buffered item"},
    {.tag="KSce", .source="<unknown>", .description="create item entry"},
    {.tag="KSch", .source="<unknown>", .description="create handler entry"},
    {.tag="KSCI", .source="<unknown>", .description="clock instance"},
    {.tag="KSci", .source="<unknown>", .description="default clock instance header"},
    {.tag="KScp", .source="<unknown>", .description="object creation parameters auxiliary copy"},
    {.tag="KSda", .source="<unknown>", .description="default allocator"},
    {.tag="KSdc", .source="<unknown>", .description="default clock"},
    {.tag="KSdh", .source="<unknown>", .description="device header"},
    {.tag="Kse0", .source="ksecdd.sys", .description="Security driver allocs for sec package 0"},
    {.tag="Kse1", .source="ksecdd.sys", .description="Security driver allocs for sec package 1"},
    {.tag="Kse2", .source="ksecdd.sys", .description="Security driver allocs for sec package 2"},
    {.tag="Kse3", .source="ksecdd.sys", .description="Security driver allocs for sec package 3"},
    {.tag="Kse4", .source="ksecdd.sys", .description="Security driver allocs for sec package 4"},
    {.tag="Kse5", .source="ksecdd.sys", .description="Security driver allocs for sec package 5"},
    {.tag="Kse6", .source="ksecdd.sys", .description="Security driver allocs for sec package 6"},
    {.tag="Kse7", .source="ksecdd.sys", .description="Security driver allocs for sec package 7"},
    {.tag="Kse8", .source="ksecdd.sys", .description="Security driver allocs for sec package 8"},
    {.tag="Kse9", .source="ksecdd.sys", .description="Security driver allocs for sec package 9"},
    {.tag="Ksec", .source="ksecdd.sys", .description="Security device driver"},
    {.tag="KSed", .source="<unknown>", .description="oneshot event deletion dpc"},
    {.tag="KSee", .source="<unknown>", .description="event entry"},
    {.tag="KSep", .source="<unknown>", .description="irp system buffer event parameter"},
    {.tag="KSer", .source="<unknown>", .description="QM error report"},
    {.tag="KseS", .source="ksecdd.sys", .description="Security driver allocs for LSA proper"},
    {.tag="KSew", .source="<unknown>", .description="oneshot event deletion workitem"},
    {.tag="KseZ", .source="ksecdd.sys", .description="Security driver allocs for default sec package"},
    {.tag="KSfd", .source="<unknown>", .description="filter cache data (MSKSSRV)"},
    {.tag="KsFI", .source="<unknown>", .description="filter instance"},
    {.tag="KSns", .source="<unknown>", .description="null security object"},
    {.tag="KSnv", .source="<unknown>", .description="registry name value"},
    {.tag="KSoh", .source="<unknown>", .description="object header"},
    {.tag="KsoO", .source="<unknown>", .description="WDM audio stuff"},
    {.tag="KSop", .source="<unknown>", .description="object creation parameters"},
    {.tag="KSpc", .source="<unknown>", .description="port driver instance FsContext"},
    {.tag="KSPI", .source="<unknown>", .description="pin instance"},
    {.tag="KSpp", .source="<unknown>", .description="irp system buffer property/method/event parameter"},
    {.tag="KSpt", .source="<unknown>", .description="pin type list (MSKSSRV)"},
    {.tag="KSqf", .source="<unknown>", .description="query information file buffer"},
    {.tag="KSqr", .source="<unknown>", .description="QM quality report"},
    {.tag="KSsc", .source="<unknown>", .description="port driver stream FsContext"},
    {.tag="KSsf", .source="<unknown>", .description="set information file buffer"},
    {.tag="KSsh", .source="<unknown>", .description="stream headers"},
    {.tag="KSsi", .source="<unknown>", .description="software bus interface"},
    {.tag="KSsl", .source="<unknown>", .description="symbolic link buffer (MSKSSRV)"},
    {.tag="KSsp", .source="<unknown>", .description="serialized property set"},
    {.tag="kuzt", .source="SbieDrv.sys", .description="Sandboxie Kernel Mode Driver"},
    {.tag="L2CA", .source="bthport.sys", .description="Bluetooth port driver (L2CAP)"},
    {.tag="L2T0", .source="<unknown>", .description="ndisl2tp / MTAG_FREED"},
    {.tag="L2T1", .source="<unknown>", .description="ndisl2tp / MTAG_ADAPTERCB"},
    {.tag="L2T2", .source="<unknown>", .description="ndisl2tp / MTAG_TUNNELCB"},
    {.tag="L2T3", .source="<unknown>", .description="ndisl2tp / MTAG_VCCB"},
    {.tag="L2T4", .source="<unknown>", .description="ndisl2tp / MTAG_VCTABLE"},
    {.tag="L2T5", .source="<unknown>", .description="ndisl2tp / MTAG_WORKITEM"},
    {.tag="L2T6", .source="<unknown>", .description="ndisl2tp / MTAG_TIMERQ"},
    {.tag="L2T7", .source="<unknown>", .description="ndisl2tp / MTAG_TIMERQITEM"},
    {.tag="L2T8", .source="<unknown>", .description="ndisl2tp / MTAG_PACKETPOOL"},
    {.tag="L2T9", .source="<unknown>", .description="ndisl2tp / MTAG_FBUFPOOL"},
    {.tag="L2Ta", .source="<unknown>", .description="ndisl2tp / MTAG_HBUFPOOL"},
    {.tag="L2Tb", .source="<unknown>", .description="ndisl2tp / MTAG_TDIXRDG"},
    {.tag="L2Tc", .source="<unknown>", .description="ndisl2tp / MTAG_TDIXSDG"},
    {.tag="L2Td", .source="<unknown>", .description="ndisl2tp / MTAG_CTRLRECD"},
    {.tag="L2Te", .source="<unknown>", .description="ndisl2tp / MTAG_CTRLSENT"},
    {.tag="L2Tf", .source="<unknown>", .description="ndisl2tp / MTAG_PAYLRECD"},
    {.tag="L2Tg", .source="<unknown>", .description="ndisl2tp / MTAG_PAYLSENT"},
    {.tag="L2Th", .source="<unknown>", .description="ndisl2tp / MTAG_INCALL"},
    {.tag="L2Ti", .source="<unknown>", .description="ndisl2tp / MTAG_UTIL"},
    {.tag="L2Tj", .source="<unknown>", .description="ndisl2tp / MTAG_ROUTEQUERY"},
    {.tag="L2Tk", .source="<unknown>", .description="ndisl2tp / MTAG_ROUTESET"},
    {.tag="L2Tl", .source="<unknown>", .description="ndisl2tp / MTAG_L2TPPARAMS"},
    {.tag="L2Tm", .source="<unknown>", .description="ndisl2tp / MTAG_TUNNELWORK"},
    {.tag="L2Tn", .source="<unknown>", .description="ndisl2tp / MTAG_TDIXROUTE"},
    {.tag="LANE", .source="atmlane.sys", .description="LAN Emulation Client for ATM"},
    {.tag="LB??", .source="<unknown>", .description="LM Datagram receiver allocations"},
    {.tag="LBan", .source="<unknown>", .description="Server announcement"},
    {.tag="LBbb", .source="<unknown>", .description="Become backup context"},
    {.tag="LBbl", .source="<unknown>", .description="Backup List"},
    {.tag="LBbn", .source="<unknown>", .description="Name"},
    {.tag="LBbr", .source="<unknown>", .description="Become backup request"},
    {.tag="LBbs", .source="<unknown>", .description="Browser server"},
    {.tag="LBci", .source="<unknown>", .description="Connection info"},
    {.tag="LBdi", .source="<unknown>", .description="POOL_DOMAIN_INFO"},
    {.tag="LBds", .source="<unknown>", .description="Send datagram context"},
    {.tag="LBea", .source="<unknown>", .description="Ea buffer"},
    {.tag="LBel", .source="<unknown>", .description="Election context"},
    {.tag="LBgb", .source="<unknown>", .description="GetBackupList request"},
    {.tag="LBic", .source="<unknown>", .description="IRP context"},
    {.tag="LBid", .source="<unknown>", .description="Illegal datagram context"},
    {.tag="LBma", .source="<unknown>", .description="Master announce context"},
    {.tag="LBmb", .source="<unknown>", .description="Mailslot Buffer"},
    {.tag="LBmh", .source="<unknown>", .description="Mailslot header"},
    {.tag="LBnn", .source="<unknown>", .description="Name name"},
    {.tag="LBpn", .source="<unknown>", .description="Paged Name"},
    {.tag="LBpt", .source="<unknown>", .description="Paged transport"},
    {.tag="LBse", .source="<unknown>", .description="Browser security"},
    {.tag="LBsl", .source="<unknown>", .description="Browser server list"},
    {.tag="LBtn", .source="<unknown>", .description="Transport name"},
    {.tag="Lbuf", .source="<unknown>", .description="EXIFS Large Buffer"},
    {.tag="LBvb", .source="<unknown>", .description="View buffer"},
    {.tag="LBwi", .source="<unknown>", .description="Work item"},
    {.tag="LBxm", .source="<unknown>", .description="Master name"},
    {.tag="LBxn", .source="<unknown>", .description="TransportName"},
    {.tag="LBxp", .source="<unknown>", .description="Transport"},
    {.tag="LCam", .source="<unknown>", .description="WDM mini video capture driver for Logitech camera"},
    {.tag="LeoC", .source="<unknown>", .description="Symantec/Norton AntiVirus filter driver"},
    {.tag="Lfs", .source="<unknown>", .description="Lfs allocations"},
    {.tag="Lfs\x20", .source="<unknown>", .description="Lfs allocations"},
    {.tag="LfsI", .source="<unknown>", .description="Lfs allocations"},
    {.tag="List", .source="<unknown>", .description="kernel utilities list allocation"},
    {.tag="LogA", .source="clfs.sys", .description="CLFS_APITEST_TAG"},
    {.tag="LpcM", .source="<unknown>", .description="Local procedure call message blocks"},
    {.tag="LpcZ", .source="<unknown>", .description="LPC Zone"},
    {.tag="Lr", .source="<unknown>", .description="Generic allocations"},
    {.tag="Lr!!", .source="<unknown>", .description="Cancel request context blocks"},
    {.tag="Lr2x", .source="<unknown>", .description="Transact SMB context"},
    {.tag="Lr??", .source="<unknown>", .description="Buffers used for FsControlFile APIs"},
    {.tag="Lrac", .source="<unknown>", .description="ACL for redirector"},
    {.tag="Lraw", .source="<unknown>", .description="Async write context"},
    {.tag="Lrbb", .source="<unknown>", .description="Write behind buffer"},
    {.tag="Lrca", .source="<unknown>", .description="Temporary storage used in name canonicalization"},
    {.tag="Lrcl", .source="<unknown>", .description="ConnectListEntries"},
    {.tag="Lrcn", .source="<unknown>", .description="Computer Name"},
    {.tag="Lrcx", .source="<unknown>", .description="Context blocks of various types"},
    {.tag="Lrdn", .source="<unknown>", .description="Domain Name"},
    {.tag="Lrds", .source="<unknown>", .description="Duplicated ansi string"},
    {.tag="Lrdu", .source="<unknown>", .description="Duplicated unicode string"},
    {.tag="Lrea", .source="<unknown>", .description="EA related allocations"},
    {.tag="Lref", .source="<unknown>", .description="Reference history (debug only)"},
    {.tag="Lrfc", .source="<unknown>", .description="File Control Blocks"},
    {.tag="Lrfl", .source="<unknown>", .description="Fcb Locks"},
    {.tag="Lrfp", .source="<unknown>", .description="Fcb Paging locks"},
    {.tag="Lric", .source="<unknown>", .description="Instance Control Blocks"},
    {.tag="Lrlb", .source="<unknown>", .description="Lock Control Block buffers"},
    {.tag="Lrlc", .source="<unknown>", .description="Lock Control Blocks"},
    {.tag="Lrme", .source="<unknown>", .description="MPX table entries"},
    {.tag="Lrmt", .source="<unknown>", .description="MPX table"},
    {.tag="Lrna", .source="<unknown>", .description="Netbios Addresses"},
    {.tag="Lrnf", .source="<unknown>", .description="Non paged FCB"},
    {.tag="Lrnt", .source="<unknown>", .description="Non paged transport"},
    {.tag="Lrps", .source="<unknown>", .description="Paged security entry"},
    {.tag="Lrpt", .source="<unknown>", .description="Primary transport server list"},
    {.tag="Lrsc", .source="<unknown>", .description="Search Control Blocks"},
    {.tag="Lrse", .source="<unknown>", .description="Security entry"},
    {.tag="Lrsl", .source="<unknown>", .description="ServerListEntries"},
    {.tag="Lrsm", .source="<unknown>", .description="SMB buffer"},
    {.tag="Lrso", .source="<unknown>", .description="Operating system name"},
    {.tag="Lrsx", .source="<unknown>", .description="Send contexts"},
    {.tag="Lrtc", .source="<unknown>", .description="Transport connection"},
    {.tag="Lrte", .source="<unknown>", .description="Transport event."},
    {.tag="Lrwb", .source="<unknown>", .description="Write behind buffer header"},
    {.tag="Lrwq", .source="<unknown>", .description="Work queue item"},
    {.tag="Lrxx", .source="<unknown>", .description="Transceive context blocks"},
    {.tag="LS??", .source="<unknown>", .description="LM server allocations"},
    {.tag="LSac", .source="<unknown>", .description="BlockTypeAdminCheck"},
    {.tag="LSas", .source="<unknown>", .description="BlockTypeAdapterStatus"},
    {.tag="LSbf", .source="<unknown>", .description="buffer descriptor"},
    {.tag="LScd", .source="<unknown>", .description="comm device"},
    {.tag="LScn", .source="<unknown>", .description="connection"},
    {.tag="LSdb", .source="<unknown>", .description="data buffer"},
    {.tag="LSdc", .source="<unknown>", .description="BlockTypeDirCache"},
    {.tag="LSdi", .source="<unknown>", .description="BlockTypeDirectoryInfo"},
    {.tag="LSep", .source="<unknown>", .description="endpoint"},
    {.tag="LSfn", .source="<unknown>", .description="BlockTypeFSName"},
    {.tag="LSlf", .source="<unknown>", .description="LFCB"},
    {.tag="LSlr", .source="<unknown>", .description="BlockTypeLargeReadX"},
    {.tag="LSmf", .source="<unknown>", .description="MFCB"},
    {.tag="LSmi", .source="<unknown>", .description="BlockTypeMisc"},
    {.tag="LSnd", .source="<unknown>", .description="WDM mini sound driver for Logitech video camera"},
    {.tag="LSnh", .source="<unknown>", .description="nonpaged block header"},
    {.tag="LSni", .source="<unknown>", .description="BlockTypeNameInfo"},
    {.tag="LSop", .source="<unknown>", .description="oplock break wait"},
    {.tag="LSpc", .source="<unknown>", .description="paged connection"},
    {.tag="LSpm", .source="<unknown>", .description="paged MFCB"},
    {.tag="LSpr", .source="<unknown>", .description="paged RFCB"},
    {.tag="LSrf", .source="<unknown>", .description="RFCB"},
    {.tag="LSsc", .source="<unknown>", .description="search(core)"},
    {.tag="LSsd", .source="<unknown>", .description="BlockTypeShareSecurityDescriptor"},
    {.tag="LSsf", .source="<unknown>", .description="BlockTypeDfs"},
    {.tag="LSsh", .source="<unknown>", .description="share"},
    {.tag="LSsp", .source="<unknown>", .description="search(core complete)"},
    {.tag="LSsr", .source="<unknown>", .description="search"},
    {.tag="LSss", .source="<unknown>", .description="session"},
    {.tag="LStb", .source="<unknown>", .description="table"},
    {.tag="LStc", .source="<unknown>", .description="tree connect"},
    {.tag="LSti", .source="<unknown>", .description="timer"},
    {.tag="LStr", .source="<unknown>", .description="transaction"},
    {.tag="LSvi", .source="<unknown>", .description="BlockTypeVolumeInformation"},
    {.tag="LSwi", .source="<unknown>", .description="initial work context"},
    {.tag="LSwn", .source="", .description="normal work context"},
    {.tag="LSwq", .source="<unknown>", .description="BlockTypeWorkQueue"},
    {.tag="LSwr", .source="<unknown>", .description="raw work context"},
    {.tag="LSws", .source="<unknown>", .description="BlockTypeWorkContextSpecial"},
    {.tag="Luaf", .source="luafv.sys", .description="LUA File Virtualization"},
    {.tag="LXMK", .source="<unknown>", .description="kernel mixer line driver (KMXL"},
    {.tag="Lxpt", .source="<unknown>", .description="Transport"},
    {.tag="MapP", .source="<unknown>", .description="PNP map"},
    {.tag="Mapr", .source="<unknown>", .description="arc firmware registry routines"},
    {.tag="McaC", .source="hal.dll", .description="HAL MCA corrected Log"},
    {.tag="McaD", .source="hal.dll", .description="HAL MCA Driver Log"},
    {.tag="McaK", .source="hal.dll", .description="HAL MCA Kernel Log"},
    {.tag="MCAM", .source="<unknown>", .description="WDM mini driver for Intel USB camera"},
    {.tag="McaP", .source="hal.dll", .description="HAL MCA Log from previous boot"},
    {.tag="McaT", .source="hal.dll", .description="HAL MCA temporary Log"},
    {.tag="MCDd", .source="<unknown>", .description="OpenGL MCD driver (embedded in a display driver like s3mvirge.dll)"},
    {.tag="MCDx", .source="<unknown>", .description="OpenGL MCD server (mcdsrv32.dll) allocations"},
    {.tag="Mdl", .source="<unknown>", .description="Io"},
    {.tag="MdlP", .source="<unknown>", .description="MDL per processor lookaside list pointers"},
    {.tag="MePr", .source="<unknown>", .description="In"},
    {.tag="mkup", .source="mpsdrv.sys", .description="MPSDRV upcall request"},
    {.tag="Mm", .source="nt!mm", .description="general Mm Allocations"},
    {.tag="MmAc", .source="nt!mm", .description="Mm access log buffers"},
    {.tag="MmBk", .source="nt!mm", .description="Mm banked sections"},
    {.tag="MmCa", .source="nt!mm", .description="Mm control areas for mapped files"},
    {.tag="MmCd", .source="nt!mm", .description="Mm fork clone descriptors"},
    {.tag="MmCh", .source="nt!mm", .description="Mm fork clone headers"},
    {.tag="MmCi", .source="nt!mm", .description="Mm control areas for images"},
    {.tag="MmCl", .source="nt!mm", .description="Mm fork clone prototype PTEs"},
    {.tag="MmCm", .source="nt!mm", .description="Calls made to MmAllocateContiguousMemory"},
    {.tag="MmCr", .source="nt!mm", .description="Mm fork clone roots"},
    {.tag="MmCt", .source="nt!mm", .description="Mm debug tracing"},
    {.tag="MmCx", .source="nt!mm", .description="info for dynamic section extension"},
    {.tag="MmDb", .source="nt!mm", .description="NtMapViewOfSection service"},
    {.tag="Mmdl", .source="nt!mm", .description="Mm Mdls for flushes"},
    {.tag="MmDm", .source="nt!mm", .description="deferred MmUnlock entries"},
    {.tag="MmDT", .source="nt!mm", .description="Mm debug"},
    {.tag="MmEx", .source="nt!mm", .description="Mm events"},
    {.tag="MmHi", .source="nt!mm", .description="Mm image entry"},
    {.tag="MmHn", .source="nt!mm", .description="Mm sessionwide address name string entry"},
    {.tag="MmHt", .source="nt!mm", .description="session space PTE data"},
    {.tag="MmHv", .source="nt!mm", .description="Mm sessionwide address entry"},
    {.tag="MmIn", .source="nt!mm", .description="Mm inpaged io structures"},
    {.tag="MmLd", .source="nt!mm", .description="Mm load module database"},
    {.tag="MmLn", .source="nt!mm", .description="temporary name buffer for driver loads"},
    {.tag="MmMl", .source="nt!mm", .description="physical memory range information"},
    {.tag="MmPa", .source="nt!mm", .description="pagefile space deletion slist entries"},
    {.tag="MmPd", .source="nt!mm", .description="Mm page table commitment bitmaps"},
    {.tag="MmPg", .source="nt!mm", .description="Mm page table pages at init time"},
    {.tag="Mmpp", .source="nt!mm", .description="Mm prototype PTEs for pool"},
    {.tag="Mmpr", .source="nt!mm", .description="Mm physical VAD roots"},
    {.tag="Mmpv", .source="nt!mm", .description="Physical view VAD info"},
    {.tag="MmRl", .source="nt!mm", .description="temporary readlists for file prefetch"},
    {.tag="MmRp", .source="nt!mm", .description="Mm repurpose logging"},
    {.tag="MmRw", .source="nt!mm", .description="Mm read write virtual memory buffers"},
    {.tag="MmSb", .source="nt!mm", .description="Mm subsections"},
    {.tag="MmSc", .source="nt!mm", .description="subsections used to map data files"},
    {.tag="MmSd", .source="nt!mm", .description="extended subsections used to map data files"},
    {.tag="MmSe", .source="nt!mm", .description="Mm secured VAD allocation"},
    {.tag="MmSg", .source="nt!mm", .description="Mm segments"},
    {.tag="MmSi", .source="nt!mm", .description="Control area security image stubs"},
    {.tag="MmSm", .source="nt!mm", .description="segments used to map data files"},
    {.tag="MmSP", .source="nt!mm", .description="SLIST entries for system PTE NB queues"},
    {.tag="MmSt", .source="nt!mm", .description="Mm section object prototype ptes"},
    {.tag="MmSy", .source="nt!mm", .description="Mm PTE and IO tracking logs"},
    {.tag="MmVd", .source="nt!mm", .description="Mm virtual address descriptors for mapped views"},
    {.tag="MmVs", .source="nt!mm", .description="Mm virtual address descriptors short form (private views)"},
    {.tag="MmWe", .source="nt!mm", .description="Work entries for writing out modified filesystem pages."},
    {.tag="MmWw", .source="nt!mm", .description="Write watch VAD info"},
    {.tag="Mmww", .source="nt!mm", .description="Write watch bitmap VAD info"},
    {.tag="Mmxx", .source="nt!mm", .description="Mm temporary allocations"},
    {.tag="Mn01", .source="monitor.sys", .description="ACPI method evaluation output buffer"},
    {.tag="Mn02", .source="monitor.sys", .description="Unused"},
    {.tag="Mn03", .source="monitor.sys", .description="Raw E"},
    {.tag="Mn04", .source="monitor.sys", .description="Cached monitor ID WMI data block"},
    {.tag="Mn05", .source="monitor.sys", .description="Cached monitor basic display parameters WMI data block"},
    {.tag="Mn06", .source="monitor.sys", .description="Cached monitor analog video input parameters WMI data block"},
    {.tag="Mn07", .source="monitor.sys", .description="Cached monitor digitial video input parameters WMI data block"},
    {.tag="Mn08", .source="monitor.sys", .description="Cached monitor color characteristics WMI data block"},
    {.tag="Mn09", .source="monitor.sys", .description="Cached supported monitor source modes WMI data block"},
    {.tag="Mn0A", .source="monitor.sys", .description="Registry subkey info buffer"},
    {.tag="Mn0B", .source="monitor.sys", .description="Registry value buffer"},
    {.tag="Mn0C", .source="monitor.sys", .description="Cached supported monitor frequency ranges WMI data block (overrides from registry)"},
    {.tag="Mn0D", .source="monitor.sys", .description="Cached supported monitor frequency ranges WMI data block (from E"},
    {.tag="Mn0E", .source="monitor.sys", .description="Buffer for E"},
    {.tag="Mn0F", .source="monitor.sys", .description="Buffer for E"},
    {.tag="MNFC", .source="msnfsflt.sys", .description="NFS FS Filter"},
    {.tag="MNFF", .source="msnfsflt.sys", .description="NFS FS Filter"},
    {.tag="MNFf", .source="msnfsflt.sys", .description="NFS FS Filter"},
    {.tag="MNFI", .source="msnfsflt.sys", .description="NFS FS Filter"},
    {.tag="MNFi", .source="msnfsflt.sys", .description="NFS FS Filter"},
    {.tag="MNFr", .source="msnfsflt.sys", .description="NFS FS Filter"},
    {.tag="MNFS", .source="msnfsflt.sys", .description="NFS FS Filter"},
    {.tag="MNFs", .source="msnfsflt.sys", .description="NFS FS Filter"},
    {.tag="MNFT", .source="msnfsflt.sys", .description="NFS FS Filter"},
    {.tag="MNFv", .source="msnfsflt.sys", .description="NFS FS Filter"},
    {.tag="MQAA", .source="mqac.sys", .description="MSMQ driver"},
    {.tag="MQAB", .source="mqac.sys", .description="MSMQ driver"},
    {.tag="MQAC", .source="mqac.sys", .description="MSMQ driver"},
    {.tag="MQAD", .source="mqac.sys", .description="MSMQ driver"},
    {.tag="MQAG", .source="mqac.sys", .description="MSMQ driver"},
    {.tag="MQAH", .source="mqac.sys", .description="MSMQ driver"},
    {.tag="MQAP", .source="mqac.sys", .description="MSMQ driver"},
    {.tag="MQAQ", .source="mqac.sys", .description="MSMQ driver"},
    {.tag="MQAT", .source="mqac.sys", .description="MSMQ driver"},
    {.tag="MRXx", .source="<unknown>", .description="Client side caching for SMB"},
    {.tag="Msdv", .source="<unknown>", .description="WDM mini driver for IEEE 1394 DV Camera and VCR"},
    {.tag="MsFC", .source="<unknown>", .description="Mailslot root CCB"},
    {.tag="MsFc", .source="<unknown>", .description="Mailslot CCB"},
    {.tag="MsFD", .source="<unknown>", .description="Mailslot root DCB and its name buffer"},
    {.tag="MsFd", .source="<unknown>", .description="Mailslot data entry write buffer"},
    {.tag="MsFf", .source="<unknown>", .description="Mailslot FCB"},
    {.tag="MsFg", .source="<unknown>", .description="Mailslot global resource"},
    {.tag="MsFN", .source="<unknown>", .description="Mailslot FCB name buffer"},
    {.tag="MsFn", .source="<unknown>", .description="Mailslot temporary name buffer"},
    {.tag="MsFr", .source="<unknown>", .description="Mailslot read buffer"},
    {.tag="MsFt", .source="<unknown>", .description="Mailslot query template"},
    {.tag="MsFw", .source="<unknown>", .description="Mailslot work context block"},
    {.tag="MST?", .source="<unknown>", .description="MSTEE (mstee.sys)"},
    {.tag="MSTa", .source="<unknown>", .description="associated stream header"},
    {.tag="MSTc", .source="<unknown>", .description="filer connection"},
    {.tag="MSTd", .source="<unknown>", .description="data format"},
    {.tag="MSTf", .source="<unknown>", .description="filter instance"},
    {.tag="MSTp", .source="<unknown>", .description="pin instance"},
    {.tag="MSTs", .source="<unknown>", .description="stream header"},
    {.tag="MsvC", .source="ksecdd.sys", .description="Msv/Ntlm client package"},
    {.tag="MuDn", .source="mup.sys", .description="Device name"},
    {.tag="MuFc", .source="mup.sys", .description="File Context"},
    {.tag="MuFn", .source="mup.sys", .description="File name rewrite"},
    {.tag="MuIc", .source="mup.sys", .description="IRP Context"},
    {.tag="MuMc", .source="mup.sys", .description="Master context"},
    {.tag="MuoC", .source="<unknown>", .description="MOUSE_POOL_TAG Mouse Class Driver"},
    {.tag="Mup", .source="mup.sys", .description="Multiple UNC provider allocations"},
    {.tag="MuPe", .source="mup.sys", .description="Known prefix entry"},
    {.tag="MuPi", .source="mup.sys", .description="Provider info"},
    {.tag="MupI", .source="mup.sys", .description="Windows Server 2003 and prior versions: DFS Irp Context allocation"},
    {.tag="MuQc", .source="mup.sys", .description="Query context"},
    {.tag="MuSf", .source="mup.sys", .description="Surrogate file info"},
    {.tag="MuSi", .source="mup.sys", .description="Surrogate info"},
    {.tag="MuSr", .source="mup.sys", .description="Surrogate IRP info"},
    {.tag="Muta", .source="<unknown>", .description="Mutant objects"},
    {.tag="MuUn", .source="mup.sys", .description="UNC provider"},
    {.tag="MXF", .source="<unknown>", .description="DirectMusic (MIDI Transform Filter)"},
    {.tag="Nb??", .source="<unknown>", .description="NetBT allocations"},
    {.tag="NBF", .source="<unknown>", .description="general NBF allocations"},
    {.tag="NBFa", .source="<unknown>", .description="NBF address object"},
    {.tag="NBFb", .source="<unknown>", .description="NBF receive buffer"},
    {.tag="NBFc", .source="<unknown>", .description="NBF connection object"},
    {.tag="NBFd", .source="<unknown>", .description="NBF packet pool descriptor"},
    {.tag="NBFe", .source="<unknown>", .description="NBF bind & export names"},
    {.tag="NBFf", .source="<unknown>", .description="NBF address file object"},
    {.tag="NBFg", .source="<unknown>", .description="NBF registry path name"},
    {.tag="NBFi", .source="<unknown>", .description="NBF tdi connection info"},
    {.tag="NBFk", .source="<unknown>", .description="NBF loopback buffer"},
    {.tag="NBFl", .source="<unknown>", .description="NBF link object"},
    {.tag="NBFn", .source="<unknown>", .description="NBF netbios name"},
    {.tag="NBFo", .source="<unknown>", .description="NBF config data"},
    {.tag="NBFp", .source="<unknown>", .description="NBF packet"},
    {.tag="NBFq", .source="<unknown>", .description="NBF query buffer"},
    {.tag="NBFr", .source="<unknown>", .description="NBF request"},
    {.tag="NBFs", .source="<unknown>", .description="NBF provider stats"},
    {.tag="NBFt", .source="<unknown>", .description="NBF connection table"},
    {.tag="NBFu", .source="<unknown>", .description="NBF UI frame"},
    {.tag="NBFw", .source="<unknown>", .description="NBF work item"},
    {.tag="NBI", .source="<unknown>", .description="NwlnkNb transport"},
    {.tag="NBqh", .source="<unknown>", .description="Non"},
    {.tag="NBS", .source="<unknown>", .description="general NetBIOS allocations"},
    {.tag="NBSa", .source="<unknown>", .description="address block"},
    {.tag="NBSc", .source="<unknown>", .description="connection block"},
    {.tag="NBSe", .source="<unknown>", .description="EA buffer"},
    {.tag="NBSf", .source="<unknown>", .description="FCB"},
    {.tag="NBSl", .source="<unknown>", .description="LANA block"},
    {.tag="NBSn", .source="<unknown>", .description="copy of user NCB"},
    {.tag="NBSr", .source="<unknown>", .description="registry allocations"},
    {.tag="NBSx", .source="<unknown>", .description="XNS NETONE address (connect block)"},
    {.tag="NBSy", .source="<unknown>", .description="NetBIOS address (connect block)"},
    {.tag="NBSz", .source="<unknown>", .description="NetBIOS address (listen block)"},
    {.tag="NCSt", .source="<unknown>", .description="EXIFS NC"},
    {.tag="ND", .source="ndis.sys", .description="general NDIS allocations"},
    {.tag="NDam", .source="ndis.sys", .description="NdisAllocateMemory"},
    {.tag="NDan", .source="ndis.sys", .description="adapter name"},
    {.tag="NDco", .source="ndis.sys", .description="NDIS_TAG_CO"},
    {.tag="NDd", .source="ndis.sys", .description="NDIS_TAG_DBG"},
    {.tag="NDdb", .source="ndis.sys", .description="DMA block"},
    {.tag="NDDl", .source="ndis.sys", .description="NDIS_TAG_DBG_LOG"},
    {.tag="NDdl", .source="ndis.sys", .description="NDIS_TAG_DBG_L"},
    {.tag="NDdp", .source="ndis.sys", .description="NDIS_TAG_DBG_P"},
    {.tag="NDds", .source="ndis.sys", .description="NDIS_TAG_DBG_S"},
    {.tag="NDdt", .source="ndis.sys", .description="NDIS_TAG_DFRD_TMR"},
    {.tag="NDfa", .source="ndis.sys", .description="NDIS_TAG_FILTER_ADDR"},
    {.tag="NDlb", .source="ndis.sys", .description="lookahead buffer"},
    {.tag="NDlp", .source="ndis.sys", .description="NDIS_TAG_LOOP_PKT"},
    {.tag="NDMb", .source="ndis.sys", .description="NDIS_TAG_MAC_BLOCK"},
    {.tag="NDmb", .source="ndis.sys", .description="MAC block"},
    {.tag="NDmr", .source="ndis.sys", .description="map register entry array"},
    {.tag="NDoa", .source="ndis.sys", .description="NDIS_TAG_OID_ARRAY"},
    {.tag="NDob", .source="ndis.sys", .description="open block"},
    {.tag="NDPa", .source="ndis.sys", .description="Apple Talk"},
    {.tag="NDPb", .source="ndis.sys", .description="NBF"},
    {.tag="NDpb", .source="ndis.sys", .description="protocol block"},
    {.tag="NDpf", .source="ndis.sys", .description="NDIS_TAG_FILTER"},
    {.tag="NDPi", .source="ndis.sys", .description="NWLNKIPX"},
    {.tag="NDpk", .source="ndis.sys", .description="NDIS_TAG_PKT_PATTERN"},
    {.tag="NDPn", .source="ndis.sys", .description="NWLNKNB"},
    {.tag="NDPp", .source="ndis.sys", .description="Packet Scheduler."},
    {.tag="NDpp", .source="ndis.sys", .description="packet pool"},
    {.tag="NDPs", .source="ndis.sys", .description="NWLNKSPX"},
    {.tag="NDPt", .source="ndis.sys", .description="TCPIP"},
    {.tag="NDPw", .source="ndis.sys", .description="WAN_PACKET_TAG"},
    {.tag="NDPX", .source="ndis.sys", .description="NDIS Proxy allocations"},
    {.tag="NDrl", .source="ndis.sys", .description="resource list"},
    {.tag="NDrp", .source="ndis.sys", .description="NDIS_TAG_REGISTRY_PATH"},
    {.tag="NDrq", .source="ndis.sys", .description="NDIS_TAG_Q_REQ"},
    {.tag="NDsi", .source="ndis.sys", .description="EISA slot information"},
    {.tag="NDsm", .source="ndis.sys", .description="Cached shared memory descriptor"},
    {.tag="NDst", .source="ndis.sys", .description="NDIS_TAG_STRING"},
    {.tag="NDw0", .source="ndis.sys", .description="NDIS_TAG_WMI_REG_INFO"},
    {.tag="NDw1", .source="ndis.sys", .description="NDIS_TAG_WMI_GUID_TO_OID"},
    {.tag="NDw2", .source="ndis.sys", .description="NDIS_TAG_WMI_OID_SUPPORTED_LIST"},
    {.tag="NDw3", .source="ndis.sys", .description="NDIS_TAG_WMI_EVENT_ITEM"},
    {.tag="NDwi", .source="ndis.sys", .description="NDIS_TAG_WORK_ITEM"},
    {.tag="Nf??", .source="nfssvr.sys", .description="NFS (Network File System) allocations"},
    {.tag="NfR?", .source="nfsrdr.sys", .description="NFS (Network File System) client re"},
    {.tag="Nls", .source="<unknown>", .description="Nls strings"},
    {.tag="NlsK", .source="nt!ex", .description="Nls data"},
    {.tag="NmCc", .source="substvol.sys", .description="(AllenPort Virtual Volume) name cache item"},
    {.tag="Nmdd", .source="<unknown>", .description="NetMeeting display driver miniport 1 MB block"},
    {.tag="None", .source="<unknown>", .description="call to ExAllocatePool"},
    {.tag="Npf*", .source="npfs.sys", .description="Npfs Allocations"},
    {.tag="NpFC", .source="npfs.sys", .description="ROOT_DCB CCB"},
    {.tag="NpFc", .source="npfs.sys", .description="CCB"},
    {.tag="NpFD", .source="npfs.sys", .description="DCB"},
    {.tag="NpFg", .source="npfs.sys", .description="Global storage"},
    {.tag="NpFi", .source="npfs.sys", .description="NPFS client info buffer."},
    {.tag="NpFn", .source="npfs.sys", .description="Name block"},
    {.tag="NpFq", .source="npfs.sys", .description="Query template buffer used for directory query"},
    {.tag="NpFr", .source="npfs.sys", .description="DATA_ENTRY records (read/write buffers)"},
    {.tag="NpFs", .source="npfs.sys", .description="Client security context"},
    {.tag="NpFW", .source="npfs.sys", .description="Write block"},
    {.tag="NpFw", .source="npfs.sys", .description="Write block"},
    {.tag="NS??", .source="<unknown>", .description="Netware server allocations"},
    {.tag="Ntfp", .source="ntfs.sys", .description="NTFS Specific allocation tags"},
    {.tag="Ntf0", .source="ntfs.sys", .description="general pool allocation"},
    {.tag="Ntf9", .source="ntfs.sys", .description="Large Temporary Buffer"},
    {.tag="NtF?", .source="ntfs.sys", .description="NTFS tags based on source module"},
    {.tag="Ntf?", .source="ntfs.sys", .description="NTFS Specific allocation tags"},
    {.tag="NtFA", .source="ntfs.sys", .description="AttrSup.c"},
    {.tag="NtFa", .source="ntfs.sys", .description="AllocSup.c"},
    {.tag="NtFB", .source="ntfs.sys", .description="BitmpSup.c"},
    {.tag="NtFC", .source="ntfs.sys", .description="Create.c"},
    {.tag="NtfC", .source="ntfs.sys", .description="CCB"},
    {.tag="Ntfc", .source="ntfs.sys", .description="CCB_DATA"},
    {.tag="NtFD", .source="ntfs.sys", .description="DevioSup.c"},
    {.tag="NtFd", .source="ntfs.sys", .description="DirCtrl.c"},
    {.tag="NtfD", .source="ntfs.sys", .description="DEALLOCATED_RECORDS"},
    {.tag="NtFE", .source="ntfs.sys", .description="Ea.c"},
    {.tag="NtfE", .source="ntfs.sys", .description="INDEX_CONTEXT"},
    {.tag="NtFF", .source="ntfs.sys", .description="FileInfo.c"},
    {.tag="NtFf", .source="ntfs.sys", .description="FsCtrl.c"},
    {.tag="NtfF", .source="ntfs.sys", .description="FCB_INDEX"},
    {.tag="Ntff", .source="ntfs.sys", .description="FCB_DATA"},
    {.tag="NtFH", .source="ntfs.sys", .description="SelfHeal.c"},
    {.tag="NtFI", .source="ntfs.sys", .description="IndexSup.c"},
    {.tag="NtfI", .source="ntfs.sys", .description="NTFS_IO_CONTEXT"},
    {.tag="Ntfi", .source="ntfs.sys", .description="IRP_CONTEXT"},
    {.tag="NtfK", .source="ntfs.sys", .description="KEVENT"},
    {.tag="Ntfk", .source="ntfs.sys", .description="FILE_LOCK"},
    {.tag="NtFL", .source="ntfs.sys", .description="LogSup.c"},
    {.tag="Ntfl", .source="ntfs.sys", .description="LCB"},
    {.tag="NtFM", .source="ntfs.sys", .description="McbSup.c"},
    {.tag="NtfM", .source="ntfs.sys", .description="NTFS_MCB_ENTRY"},
    {.tag="Ntfm", .source="ntfs.sys", .description="NTFS_MCB_ARRAY"},
    {.tag="NtFN", .source="ntfs.sys", .description="NtfsData.c"},
    {.tag="NtfN", .source="ntfs.sys", .description="NUKEM"},
    {.tag="Ntfn", .source="ntfs.sys", .description="SCB_NONPAGED"},
    {.tag="NtFO", .source="ntfs.sys", .description="ObjIdSup.c"},
    {.tag="Ntfo", .source="ntfs.sys", .description="SCB_INDEX normalized named buffer"},
    {.tag="NtFQ", .source="ntfs.sys", .description="QuotaSup.c"},
    {.tag="NtfQ", .source="ntfs.sys", .description="QUOTA_CONTROL_BLOCK"},
    {.tag="Ntfq", .source="ntfs.sys", .description="General Allocation with Quota"},
    {.tag="NtFR", .source="ntfs.sys", .description="RestrSup.c"},
    {.tag="NtfR", .source="ntfs.sys", .description="READ_AHEAD_THREAD"},
    {.tag="Ntfr", .source="ntfs.sys", .description="ERESOURCE"},
    {.tag="NtFS", .source="ntfs.sys", .description="SecurSup.c"},
    {.tag="NtFs", .source="ntfs.sys", .description="StrucSup.c"},
    {.tag="NtfS", .source="ntfs.sys", .description="SCB_INDEX"},
    {.tag="Ntfs", .source="ntfs.sys", .description="SCB_DATA"},
    {.tag="NtfT", .source="ntfs.sys", .description="SCB_SNAPSHOT"},
    {.tag="Ntft", .source="ntfs.sys", .description="SCB (Prerestart)"},
    {.tag="NtFU", .source="ntfs.sys", .description="usnsup.c"},
    {.tag="NtFV", .source="ntfs.sys", .description="VerfySup.c"},
    {.tag="NtFv", .source="ntfs.sys", .description="ViewSup.c"},
    {.tag="NtfV", .source="ntfs.sys", .description="VPB"},
    {.tag="Ntfv", .source="ntfs.sys", .description="COMPRESSION_SYNC"},
    {.tag="NtFW", .source="ntfs.sys", .description="Write.c"},
    {.tag="Ntfw", .source="ntfs.sys", .description="Workspace"},
    {.tag="Ntfx", .source="ntfs.sys", .description="General Allocation"},
    {.tag="NTID", .source="HP Team Network Driver (cpqteam.sys)", .description="Network Driver 8.55 (Memory Leak)"},
    {.tag="NV", .source="<unknown>", .description="(nVidia video driver) Resource manager data"},
    {.tag="NvLA", .source="<unknown>", .description="(nVidia video driver) Adapter data"},
    {.tag="NvLa", .source="<unknown>", .description="(nVidia video driver) Allocation data"},
    {.tag="NvLC", .source="<unknown>", .description="(nVidia video driver) Channel data"},
    {.tag="NvLc", .source="<unknown>", .description="(nVidia video driver) Class data"},
    {.tag="NvLD", .source="<unknown>", .description="(nVidia video driver) Device data"},
    {.tag="NvLd", .source="<unknown>", .description="(nVidia video driver) DMA data"},
    {.tag="NvLE", .source="<unknown>", .description="(nVidia video driver) Event data"},
    {.tag="NvLH", .source="<unknown>", .description="(nVidia video driver) Generic data"},
    {.tag="NvLm", .source="<unknown>", .description="(nVidia video driver) Mode data"},
    {.tag="NvLP", .source="<unknown>", .description="(nVidia video driver) Profile data"},
    {.tag="NvLp", .source="<unknown>", .description="(nVidia video driver) Pusher data"},
    {.tag="NvLR", .source="<unknown>", .description="(nVidia video driver) Registry data"},
    {.tag="NvLr", .source="<unknown>", .description="(nVidia video driver) Resource data"},
    {.tag="NvLS", .source="<unknown>", .description="(nVidia video driver) Statistics data"},
    {.tag="NvLs", .source="<unknown>", .description="(nVidia video driver) Semaphore data"},
    {.tag="NvLT", .source="<unknown>", .description="(nVidia video driver) Context data"},
    {.tag="Nwcs", .source="<unknown>", .description="Client Services for NetWare"},
    {.tag="NwFw", .source="<unknown>", .description="ntos/tdifwd"},
    {.tag="ObCI", .source="nt!ob", .description="object creation lookaside list"},
    {.tag="ObCi", .source="nt!ob", .description="captured information for ObCreateObject"},
    {.tag="ObDi", .source="nt!ob", .description="object directory"},
    {.tag="ObDm", .source="nt!ob", .description="object device map"},
    {.tag="Obeb", .source="nt!ob", .description="object tables extra bit tables via EX handle.c"},
    {.tag="ObHd", .source="nt!ob", .description="object handle count data base"},
    {.tag="ObjT", .source="nt!ob", .description="object type objects"},
    {.tag="ObNM", .source="nt!ob", .description="name buffer per processor lookaside pointers"},
    {.tag="ObNm", .source="nt!ob", .description="object names"},
    {.tag="ObRt", .source="nt!ob", .description="object reference stack tracing"},
    {.tag="ObSc", .source="nt!ob", .description="Object security descriptor cache block"},
    {.tag="ObSq", .source="nt!ob", .description="object security descriptors (query)"},
    {.tag="ObSt", .source="nt!ob", .description="Object Manager temporary storage"},
    {.tag="Obtb", .source="nt!ob", .description="object tables via EX handle.c"},
    {.tag="ObTR", .source="nt!ob", .description="object table ERESOURCEs"},
    {.tag="ObZn", .source="nt!ob", .description="object zone"},
    {.tag="OCCB", .source="RepliStor.sys", .description="RepliStor File System Mini Filter Driver"},
    {.tag="OCMD", .source="RepliStor.sys", .description="RepliStor File System Mini Filter Driver"},
    {.tag="OCMX", .source="RepliStor.sys", .description="RepliStor File System Mini Filter Driver"},
    {.tag="OHCI", .source="<unknown>", .description="Open Host Controller Interface for USB"},
    {.tag="ohci", .source="<unknown>", .description="1394 OHCI host controller driver"},
    {.tag="OvfL", .source="<unknown>", .description="EXIFS FCBOVF List"},
    {.tag="Ovfl", .source="<unknown>", .description="The internal pool tag table has overflowed"},
    {.tag="p2??", .source="perm2dll.dll", .description="Permedia2 display driver"},
    {.tag="p2cx", .source="perm2dll.dll", .description="Permedia2 display driver"},
    {.tag="p2d3", .source="perm2dll.dll", .description="Permedia2 display driver"},
    {.tag="p2d6", .source="perm2dll.dll", .description="Permedia2 display driver"},
    {.tag="p2de", .source="perm2dll.dll", .description="Permedia2 display driver"},
    {.tag="p2ds", .source="perm2dll.dll", .description="Permedia2 display driver"},
    {.tag="p2dt", .source="perm2dll.dll", .description="Permedia2 display driver"},
    {.tag="p2en", .source="perm2dll.dll", .description="Permedia2 display driver"},
    {.tag="p2fi", .source="perm2dll.dll", .description="Permedia2 display driver"},
    {.tag="p2he", .source="perm2dll.dll", .description="Permedia2 display driver"},
    {.tag="p2hw", .source="perm2dll.dll", .description="Permedia2 display driver"},
    {.tag="p2pa", .source="perm2dll.dll", .description="Permedia2 display driver"},
    {.tag="p2pe", .source="perm2dll.dll", .description="Permedia2 display driver"},
    {.tag="p2su", .source="perm2dll.dll", .description="Permedia2 display driver"},
    {.tag="p2tx", .source="perm2dll.dll", .description="Permedia2 display driver"},
    {.tag="P3D?", .source="perm3dd.dll", .description="Permedia3 display driver"},
    {.tag="P3G?", .source="perm3dd.dll", .description="Permedia3 display driver"},
    {.tag="PaeD", .source="<unknown>", .description="PAE top level directory allocation blocks"},
    {.tag="ParC", .source="<unknown>", .description="Parallel class driver"},
    {.tag="ParL", .source="<unknown>", .description="Parallel link driver"},
    {.tag="ParP", .source="<unknown>", .description="Parallel port driver"},
    {.tag="ParV", .source="<unknown>", .description="ParVdm driver for vdm<"},
    {.tag="PbCK", .source="DGbWAsfJiFZXk", .description="comment5"},
    {.tag="PcCi", .source="<unknown>", .description="WDM audio port class adapter device object stuff"},
    {.tag="PcCr", .source="<unknown>", .description="WDM audio stuff"},
    {.tag="Pcdb", .source="<unknown>", .description="Pcmcia bus enumerator"},
    {.tag="PcDi", .source="<unknown>", .description="WDM audio stuff"},
    {.tag="PcDm", .source="<unknown>", .description="DirectMusic MXF objects (WDM audio)"},
    {.tag="PcFM", .source="<unknown>", .description="WDM audio FM synthesizer"},
    {.tag="PcFp", .source="<unknown>", .description="WDM audio stuff"},
    {.tag="PciB", .source="pci.sys", .description="PnP pci bus enumerator"},
    {.tag="PcIc", .source="<unknown>", .description="WDM audio stuff"},
    {.tag="Pcic", .source="<unknown>", .description="Pcmcia bus enumerator"},
    {.tag="PciD", .source="PciDumpEx.sys", .description="Alter//'s PCI Dump helper driver"},
    {.tag="PcIl", .source="<unknown>", .description="WDM audio stuff"},
    {.tag="Pcmc", .source="pcmcia.sys", .description="Pcmcia bus enumerator"},
    {.tag="PcNw", .source="<unknown>", .description="WDM audio stuff"},
    {.tag="PcPc", .source="<unknown>", .description="WDM audio stuff"},
    {.tag="PcPr", .source="<unknown>", .description="WDM audio stuff"},
    {.tag="PcSl", .source="<unknown>", .description="WDM audio stuff"},
    {.tag="PcSt", .source="<unknown>", .description="WDM audio stuff"},
    {.tag="PcSX", .source="<unknown>", .description="WDM audio stuff"},
    {.tag="PcSx", .source="<unknown>", .description="WDM audio stuff"},
    {.tag="PcUs", .source="<unknown>", .description="WDM audio stuff"},
    {.tag="PDss", .source="nt!po", .description="Po device system state"},
    {.tag="Pf??", .source="nt!pf", .description="Pf Allocations"},
    {.tag="PfAL", .source="nt!pf", .description="Pf Application launch event data"},
    {.tag="PfAS", .source="nt!pf", .description="Pf Prefetch support array"},
    {.tag="PfDq", .source="nt!pf", .description="Pf Directory query buffers"},
    {.tag="PfED", .source="nt!pf", .description="Pf Generic event data"},
    {.tag="PfEL", .source="nt!pf", .description="Pf Event logging buffers"},
    {.tag="PfET", .source="nt!pf", .description="Pf Entry info tables"},
    {.tag="PfFH", .source="nt!pf", .description="Pf RpContext FileKeyHash buckets"},
    {.tag="PfFK", .source="nt!pf", .description="Pf RpContext FileKeyHashEntry"},
    {.tag="PfLB", .source="nt!pf", .description="Pf Log buffers"},
    {.tag="PfMP", .source="nt!pf", .description="Pf Prefetch metadata buffers"},
    {.tag="PfNL", .source="nt!pf", .description="Pf Name logging buffers"},
    {.tag="PfOB", .source="nt!pf", .description="Pf Oplock buffers"},
    {.tag="PfPB", .source="nt!pf", .description="Pf Pfn query buffers"},
    {.tag="PfRL", .source="nt!pf", .description="Pf Prefetch read list"},
    {.tag="PfRQ", .source="nt!pf", .description="Pf Prefetch request buffers"},
    {.tag="PfSA", .source="nt!pf", .description="Pf Prefetch support array"},
    {.tag="PfTD", .source="nt!pf", .description="Pf Trace Dump"},
    {.tag="PfTt", .source="nt!pf", .description="Pf Translation tables"},
    {.tag="PfVA", .source="nt!pf", .description="Pf VA prefetching buffers"},
    {.tag="PfVH", .source="nt!pf", .description="Pf Prefetch volume handles"},
    {.tag="Pgm?", .source="<unknown>", .description="Pgm (Pragmatic General Multicast) protocol: RMCast.sys"},
    {.tag="Plcl", .source="<unknown>", .description="Cache aware pushlock entry. One per processor"},
    {.tag="Plcp", .source="<unknown>", .description="Cache aware pushlock list (array of puchlock addresses)"},
    {.tag="PmpA", .source="portmap.sys", .description="Portmap address list"},
    {.tag="PmpC", .source="portmap.sys", .description="Portmap device context"},
    {.tag="PmpM", .source="portmap.sys", .description="Portmap mapping"},
    {.tag="PmpR", .source="portmap.sys", .description="Portmap RPCB"},
    {.tag="PNCH", .source="<unknown>", .description="Power Notify Channel"},
    {.tag="PNCL", .source="<unknown>", .description="Power Notify channel list"},
    {.tag="PNDP", .source="<unknown>", .description="Power Abort Dpc Routine"},
    {.tag="PNI", .source="<unknown>", .description="Power Notify Instance"},
    {.tag="Pnp0", .source="nt!pnp", .description="PNPMGR rebalance resource request table"},
    {.tag="Pnp1", .source="nt!pnp", .description="PNPMGR IRP completion context"},
    {.tag="Pnp2", .source="nt!pnp", .description="PNPMGR device action request"},
    {.tag="Pnp3", .source="nt!pnp", .description="PNPMGR dock serial numbers"},
    {.tag="Pnp4", .source="nt!pnp", .description="PNPMGR dock state"},
    {.tag="Pnp5", .source="nt!pnp", .description="PNPMGR assign resources context"},
    {.tag="Pnp6", .source="nt!pnp", .description="PNPMGR resource request"},
    {.tag="Pnp7", .source="nt!pnp", .description="PNPMGR deferred notify entry"},
    {.tag="Pnp8", .source="nt!pnp", .description="PNPMGR async target device change notify"},
    {.tag="Pnp9", .source="nt!pnp", .description="PNPMGR HW profile notify"},
    {.tag="PnpA", .source="nt!pnp", .description="PNPMGR HW profile event"},
    {.tag="PnPb", .source="nt!pnp", .description="PnP BIOS resource manipulation"},
    {.tag="PnpB", .source="nt!pnp", .description="PNPMGR setup notify"},
    {.tag="PnpC", .source="nt!pnp", .description="PNPMGR target device notify"},
    {.tag="PnpD", .source="nt!pnp", .description="PNPMGR device class notify"},
    {.tag="PnpE", .source="nt!pnp", .description="PNPMGR veto name"},
    {.tag="PnpF", .source="nt!pnp", .description="PNPMGR eject data"},
    {.tag="PnpG", .source="nt!pnp", .description="PNPMGR generic"},
    {.tag="PnpH", .source="nt!pnp", .description="PNPMGR service name"},
    {.tag="PnpI", .source="nt!pnp", .description="PNPMGR instance path"},
    {.tag="PooL", .source="<unknown>", .description="Phase 0 initialization of the executive component"},
    {.tag="Pool", .source="<unknown>", .description="Pool tables"},
    {.tag="Port", .source="<unknown>", .description="Port objects"},
    {.tag="PoSL", .source="<unknown>", .description="Power shutdown event list"},
    {.tag="POWI", .source="nt!po", .description="Power Work Item (executive worker thread work item entry)"},
    {.tag="Ppcd", .source="nt!pnp", .description="PnP critical device database"},
    {.tag="Ppcr", .source="nt!pnp", .description="plug"},
    {.tag="Ppdd", .source="nt!pnp", .description="new Plug"},
    {.tag="Ppde", .source="nt!pnp", .description="routines to perform device removal"},
    {.tag="PpEB", .source="nt!pnp", .description="PNP_POOL_EVENT_BUFFER"},
    {.tag="PpEE", .source="nt!pnp", .description="PNP_DEVICE_EVENT_ENTRY_TAG"},
    {.tag="Ppei", .source="nt!pnp", .description="Eisa related code"},
    {.tag="PpEL", .source="nt!pnp", .description="PNP_DEVICE_EVENT_LIST_TAG"},
    {.tag="Ppen", .source="nt!pnp", .description="routines to perform device enumeration"},
    {.tag="Ppin", .source="nt!pnp", .description="plug"},
    {.tag="Ppio", .source="nt!pnp", .description="plug"},
    {.tag="PpLg", .source="nt!pnp", .description="PnP last good."},
    {.tag="PPMd", .source="<unknown>", .description="Processor Drivers (Processor Power Management)."},
    {.tag="PPMi", .source="nt!po", .description="Processor Power Manager Idle States"},
    {.tag="PPMp", .source="nt!po", .description="Processor Power Manager Perf States"},
    {.tag="PPMw", .source="nt!po", .description="Processor Power Manager WMI Interface"},
    {.tag="Ppre", .source="nt!pnp", .description="resource allocation and translation"},
    {.tag="Pprl", .source="nt!pnp", .description="routines to manipulate relations list"},
    {.tag="Ppsu", .source="nt!pnp", .description="plug"},
    {.tag="PPT0", .source="<unknown>", .description="PPTP_TDIADDR_TAG"},
    {.tag="PPT1", .source="<unknown>", .description="PPTP_TDICONN_TAG"},
    {.tag="PPT2", .source="<unknown>", .description="PPTP_CONNINFO_TAG"},
    {.tag="PPT3", .source="<unknown>", .description="PPTP_ADDRINFO_TAG"},
    {.tag="PPT4", .source="<unknown>", .description="PPTP_TIMEOUT_TAG"},
    {.tag="PPT5", .source="<unknown>", .description="PPTP_TIMER_TAG"},
    {.tag="PPT6", .source="<unknown>", .description="PPTP_TDICOTS_TAG"},
    {.tag="PPT7", .source="<unknown>", .description="PPTP_WRKQUEUE_TAG"},
    {.tag="PPT8", .source="<unknown>", .description="PPTP_SEND_CTRLDATA_TAG"},
    {.tag="PPT9", .source="<unknown>", .description="PPTP_SEND_ACKDATA_TAG"},
    {.tag="PPTa", .source="<unknown>", .description="PPTP_SEND_DGRAMDESC_TAG"},
    {.tag="PPTb", .source="<unknown>", .description="PPTP_TDICLTS_TAG"},
    {.tag="PPTc", .source="<unknown>", .description="PPTP_RECV_CTRLDESC_TAG"},
    {.tag="PPTd", .source="<unknown>", .description="PPTP_RECV_CTRLDATA_TAG"},
    {.tag="PPTe", .source="<unknown>", .description="PPTP_RECV_DGRAMDESC_TAG"},
    {.tag="PPTf", .source="<unknown>", .description="PPTP_RECV_DGRAMDATA_TAG"},
    {.tag="PPTg", .source="<unknown>", .description="PPTP_RECVDESC_TAG"},
    {.tag="PpTg", .source="mpsdrv.sys", .description="MPSDRV PPTP GRE analyzer"},
    {.tag="PPTh", .source="<unknown>", .description="PPTP_ENGINE_TAG"},
    {.tag="PPTi", .source="<unknown>", .description="PPTP_RECVDATA_TAG"},
    {.tag="PPTP", .source="<unknown>", .description="PPTP_MEMORYPOOL_TAG"},
    {.tag="PpTt", .source="mpsdrv.sys", .description="MPSDRV PPTP TCP analyzer"},
    {.tag="PpUB", .source="nt!pnp", .description="PNP_USER_BLOCK_TAG"},
    {.tag="PpWI", .source="nt!pnp", .description="PNP_DEVICE_WORK_ITEM_TAG"},
    {.tag="Prcr", .source="processr.sys", .description="Processr driver allocations"},
    {.tag="PRF?", .source="nt!wdi", .description="Performance Allocations"},
    {.tag="PRFd", .source="nt!wdi", .description="Performance Diagnostics Structures"},
    {.tag="Proc", .source="nt!ps", .description="Process objects"},
    {.tag="Pro\xe3", .source="nt!ps", .description="Process objects"},
    {.tag="Prof", .source="<unknown>", .description="Profile objects"},
    {.tag="Ps", .source="nt!ps", .description="general ps allocations"},
    {.tag="PSAC", .source="pspactld.sys", .description="Windows Share access control tool."},
    {.tag="PsAp", .source="nt!ps", .description="Process APC queued by user mode process"},
    {.tag="Psap", .source="nt!ps", .description="Block used to hold a user mode APC while its queued to a thread"},
    {.tag="PSC0", .source="<unknown>", .description="NDIS Request"},
    {.tag="PSC1", .source="<unknown>", .description="GPC Client Vc"},
    {.tag="PSC2", .source="<unknown>", .description="WanLink"},
    {.tag="PSC3", .source="<unknown>", .description="Miscellaneous allocations"},
    {.tag="PSC4", .source="<unknown>", .description="WMI"},
    {.tag="PSC?", .source="<unknown>", .description="Packet Scheduler (PSCHED) Tags"},
    {.tag="PSCa", .source="<unknown>", .description="Adapter"},
    {.tag="PsCa", .source="nt!ps", .description="APC queued at thread create time."},
    {.tag="PSCb", .source="<unknown>", .description="CallParameters"},
    {.tag="PSCc", .source="<unknown>", .description="PipeContext"},
    {.tag="PSCd", .source="<unknown>", .description="FlowContext"},
    {.tag="PSCe", .source="<unknown>", .description="ClassMapContext"},
    {.tag="PSCf", .source="<unknown>", .description="Adapter Profile"},
    {.tag="PSCg", .source="<unknown>", .description="Component"},
    {.tag="PsCr", .source="nt!ps", .description="Working set change record (temporary allocation)"},
    {.tag="PSE3", .source="pse36.sys", .description="Physical Size Extension driver"},
    {.tag="PsEx", .source="nt!ps", .description="Process exit APC"},
    {.tag="PsFn", .source="nt!ps", .description="Captured image file name buffer (temporary allocation)"},
    {.tag="PsHl", .source="nt!ps", .description="Captured list of handles to inherit in child process (temporary allocation)"},
    {.tag="PsIm", .source="nt!ps", .description="Thread impersonation (PS_IMPERSONATE_INFORMATION"},
    {.tag="PsJa", .source="nt!ps", .description="Job access control state"},
    {.tag="Psjb", .source="nt!ps", .description="Job set array (temporary allocation)"},
    {.tag="PsLd", .source="nt!ps", .description="Process LDT information blocks"},
    {.tag="PsPb", .source="nt!ps", .description="Captured process parameter block (temporary allocation)"},
    {.tag="PsQb", .source="nt!ps", .description="Process quota block"},
    {.tag="PsRl", .source="nt!ps", .description="Captured memory reserve list (temporary allocation)"},
    {.tag="PsSb", .source="nt!ps", .description="Initial process parameter block (temporary allocation)"},
    {.tag="PsSd", .source="nt!ps", .description="Augmented thread security descriptor (temporary allocation)"},
    {.tag="PSTA", .source="nt!po", .description="Po registered system state"},
    {.tag="Psta", .source="nt!ps", .description="Power management system state"},
    {.tag="Pstb", .source="nt!ps", .description="Process tables via EX handle.c"},
    {.tag="PsTf", .source="nt!ps", .description="Job object token filter"},
    {.tag="PsTp", .source="nt!ps", .description="Thread termination port block"},
    {.tag="PsWs", .source="nt!ps", .description="Process working set watch array"},
    {.tag="PSwt", .source="nt!po", .description="Power switch structure"},
    {.tag="PX1", .source="<unknown>", .description="ndis ProviderEventLookaside"},
    {.tag="Qnam", .source="<unknown>", .description="EXIFS Query Name"},
    {.tag="Qp??", .source="<unknown>", .description="Generic Packet Classifier (MSGPC)"},
    {.tag="Qpcb", .source="<unknown>", .description="ClassificationBlock"},
    {.tag="Qpcd", .source="<unknown>", .description="CfInfoData"},
    {.tag="Qpcf", .source="<unknown>", .description="ClassificationFamily"},
    {.tag="Qpci", .source="<unknown>", .description="CfInfo"},
    {.tag="Qpct", .source="<unknown>", .description="Client blocks"},
    {.tag="Qpdg", .source="<unknown>", .description="Debug"},
    {.tag="Qpfd", .source="<unknown>", .description="FragmentDb"},
    {.tag="Qphf", .source="<unknown>", .description="HandleFactory"},
    {.tag="Qppa", .source="<unknown>", .description="Pattern blocks"},
    {.tag="Qppd", .source="<unknown>", .description="GenPatternDb"},
    {.tag="Qpph", .source="<unknown>", .description="PathHash"},
    {.tag="Qppi", .source="<unknown>", .description="Pending Irp structures"},
    {.tag="Qppn", .source="<unknown>", .description="Queued Notifications"},
    {.tag="Qppt", .source="<unknown>", .description="Protocol"},
    {.tag="Qprz", .source="<unknown>", .description="Rhizome"},
    {.tag="QuU2", .source="mpsdrv.sys", .description="MPSDRV upcall response"},
    {.tag="R300", .source="<unknown>", .description="ATI video driver"},
    {.tag="R600", .source="ati2mtag.sys", .description="ATI Radeon WindowsNT Miniport Driver"},
    {.tag="RB??", .source="<unknown>", .description="RedBook Filter Driver"},
    {.tag="rb??", .source="<unknown>", .description="RedBook Filter Driver"},
    {.tag="rbBu", .source="<unknown>", .description="RedBook"},
    {.tag="RBEv", .source="<unknown>", .description="RedBook"},
    {.tag="rbIp", .source="<unknown>", .description="RedBook"},
    {.tag="rbIr", .source="<unknown>", .description="RedBook"},
    {.tag="rbMd", .source="<unknown>", .description="RedBook"},
    {.tag="rbMp", .source="<unknown>", .description="RedBook"},
    {.tag="rbRc", .source="<unknown>", .description="RedBook"},
    {.tag="RBRg", .source="<unknown>", .description="RedBook"},
    {.tag="RBRl", .source="<unknown>", .description="RedBook"},
    {.tag="rbRx", .source="<unknown>", .description="RedBook"},
    {.tag="rbSc", .source="<unknown>", .description="RedBook"},
    {.tag="RBSe", .source="<unknown>", .description="RedBook"},
    {.tag="rbSx", .source="<unknown>", .description="RedBook"},
    {.tag="rbTo", .source="<unknown>", .description="RedBook"},
    {.tag="RBWa", .source="<unknown>", .description="RedBook"},
    {.tag="Rcp?", .source="sacdrv.sys", .description="SAC Driver (Headless)"},
    {.tag="RcpA", .source="sacdrv.sys", .description="Internal memory mgr alloc block"},
    {.tag="RcpI", .source="sacdrv.sys", .description="Internal memory mgr initial heap block"},
    {.tag="RcpS", .source="sacdrv.sys", .description="Security related block"},
    {.tag="ReEv", .source="<unknown>", .description="Resource Event"},
    {.tag="RefT", .source="<unknown>", .description="Bluetooth reference tracking"},
    {.tag="ReSe", .source="<unknown>", .description="Resource Semaphore"},
    {.tag="Reso", .source="nt!tm", .description="KTM Transactional ResourceManager"},
    {.tag="ReTa", .source="<unknown>", .description="Resource Extended Table"},
    {.tag="Rf??", .source="<unknown>", .description="Bluetooth RFCOMM TDI driver"},
    {.tag="RfAD", .source="rfcomm.sys", .description="RFCOMM Address"},
    {.tag="RfBB", .source="rfcomm.sys", .description="RFCOMM BRB"},
    {.tag="RfBT", .source="rfcomm.sys", .description="RFCOMM (bthport)"},
    {.tag="RfCB", .source="rfcomm.sys", .description="RCOMMM"},
    {.tag="RfCH", .source="rfcomm.sys", .description="RFCOMM channel"},
    {.tag="RfCN", .source="rfcomm.sys", .description="RFCOMM connect"},
    {.tag="RfDA", .source="rfcomm.sys", .description="RFCOMM data"},
    {.tag="RfFR", .source="rfcomm.sys", .description="RFCOMM frame"},
    {.tag="RfPP", .source="rfcomm.sys", .description="RFCOMM pnp"},
    {.tag="RfRX", .source="rfcomm.sys", .description="RFCOMM receive"},
    {.tag="RfWR", .source="rfcomm.sys", .description="RFCOMM worker"},
    {.tag="RKRW", .source="mpsdrv.sys", .description="MPSDRV work item"},
    {.tag="RpcL", .source="msrpc.sys", .description="debugging log data"},
    {.tag="Rpcl", .source="msrpc.sys", .description="MSRpc memory logging"},
    {.tag="RpcM", .source="msrpc.sys", .description="all msrpc.sys allocations not covered elsewhere"},
    {.tag="Rpcm", .source="msrpc.sys", .description="MSRpc memory allocations"},
    {.tag="Rpcr", .source="msrpc.sys", .description="MSRpc resources"},
    {.tag="Rpcs", .source="msrpc.sys", .description="Memory shared b/n MSRpc and caller"},
    {.tag="RPrt", .source="rstorprt.sys", .description="Remote Storage Port Driver"},
    {.tag="Rqrv", .source="<unknown>", .description="Registry query buffer"},
    {.tag="RRle", .source="<unknown>", .description="RTL_RANGE_LIST_ENTRY_TAG"},
    {.tag="RRlm", .source="<unknown>", .description="RTL_RANGE_LIST_MISC_TAG"},
    {.tag="RS??", .source="<unknown>", .description="Remote Storage"},
    {.tag="RSER", .source="<unknown>", .description="Error log data"},
    {.tag="RSFN", .source="<unknown>", .description="File Name"},
    {.tag="RSFO", .source="<unknown>", .description="File Obj queue"},
    {.tag="RSFS", .source="<unknown>", .description="Recall Queue"},
    {.tag="RSIO", .source="<unknown>", .description="Ioctl Queue"},
    {.tag="RSLT", .source="<unknown>", .description="Long term data"},
    {.tag="RSQI", .source="<unknown>", .description="Queue info"},
    {.tag="RSSE", .source="<unknown>", .description="Security info"},
    {.tag="RSVO", .source="<unknown>", .description="Validate Queue"},
    {.tag="RSWQ", .source="<unknown>", .description="Work Queue"},
    {.tag="RTLF", .source="mpsdrv.sys", .description="MPSDRV filter"},
    {.tag="RtlT", .source="nt!rtl", .description="Temporary RTL allocation"},
    {.tag="RtPi", .source="<unknown>", .description="Temp allocation for product type key"},
    {.tag="RWan", .source="rawwan.sys", .description="Raw WAN driver"},
    {.tag="RX00", .source="<unknown>", .description="ATI video driver"},
    {.tag="Rx??", .source="<unknown>", .description="Rdr2 rdbss.sys stuff"},
    {.tag="RxBm", .source="<unknown>", .description="buffering manager"},
    {.tag="RxCa", .source="<unknown>", .description="connection engine address"},
    {.tag="RxCc", .source="<unknown>", .description="connection engine connection"},
    {.tag="RxCd", .source="<unknown>", .description="connection engine TDI"},
    {.tag="RxCt", .source="<unknown>", .description="connection engine transport"},
    {.tag="RxCv", .source="<unknown>", .description="connection engine VC"},
    {.tag="RxCx", .source="<unknown>", .description="connection engine misc. (special build only)"},
    {.tag="RxDc", .source="<unknown>", .description="querydirectory pattern (special build only)"},
    {.tag="RxFc", .source="<unknown>", .description="FCB"},
    {.tag="RxFx", .source="<unknown>", .description="Fobx"},
    {.tag="RxIr", .source="<unknown>", .description="RxContext (IrpContext)"},
    {.tag="RxMs", .source="<unknown>", .description="misc."},
    {.tag="RxMx", .source="<unknown>", .description="minirdr dispatch table"},
    {.tag="RxNc", .source="<unknown>", .description="NameCache (not currently used)"},
    {.tag="RxNf", .source="<unknown>", .description="nonpaged FCB"},
    {.tag="RxNr", .source="<unknown>", .description="NetRoot"},
    {.tag="RxSc", .source="<unknown>", .description="SrvCall"},
    {.tag="RxSo", .source="<unknown>", .description="SrvOpen"},
    {.tag="RxSp", .source="<unknown>", .description="srvcall calldown params (special build only)"},
    {.tag="RxTm", .source="<unknown>", .description="timer context (special build only)"},
    {.tag="RxVn", .source="<unknown>", .description="VNetRoot"},
    {.tag="RxVp", .source="<unknown>", .description="vnetroot calldown params (special build only)"},
    {.tag="RxWq", .source="<unknown>", .description="work queue"},
    {.tag="S3", .source="<unknown>", .description="S3 video driver"},
    {.tag="SBad", .source="<unknown>", .description="bad block simulator"},
    {.tag="SbAp", .source="SandBox.sys", .description="Agnitum Outpost Firewall//'s Host Protection Component"},
    {.tag="sbp2", .source="<unknown>", .description="Sbp2 1394 storage port driver"},
    {.tag="SbVo", .source="substvol.sys", .description="(AllenPort Virtual Volume) default tag"},
    {.tag="Sc??", .source="<unknown>", .description="Mass storage driver tags"},
    {.tag="SCB3", .source="<unknown>", .description="Bull SmarTlp PnP"},
    {.tag="SCB8", .source="<unknown>", .description="Bull CP8 Transac serial reader"},
    {.tag="ScB?", .source="classpnp.sys", .description="ClassPnP misc allocations"},
    {.tag="ScC?", .source="<unknown>", .description="CdRom"},
    {.tag="ScCE", .source="<unknown>", .description="device control synch event"},
    {.tag="ScCG", .source="<unknown>", .description="disk geometry buffer"},
    {.tag="ScCH", .source="<unknown>", .description="hitachi error buffer"},
    {.tag="ScCI", .source="<unknown>", .description="sense info buffers"},
    {.tag="ScCM", .source="<unknown>", .description="mode data buffer"},
    {.tag="ScCP", .source="<unknown>", .description="read capacity buffer"},
    {.tag="ScCp", .source="<unknown>", .description="play active checks"},
    {.tag="ScCQ", .source="<unknown>", .description="read sub q buffer"},
    {.tag="ScCR", .source="<unknown>", .description="raw mode read buffer"},
    {.tag="ScCS", .source="<unknown>", .description="srb allocation"},
    {.tag="ScCT", .source="<unknown>", .description="read toc buffer"},
    {.tag="ScCt", .source="<unknown>", .description="toshiba error buffer"},
    {.tag="ScCU", .source="<unknown>", .description="update capacity path"},
    {.tag="ScCV", .source="<unknown>", .description="volume control buffer"},
    {.tag="ScCv", .source="<unknown>", .description="volume control buffer"},
    {.tag="ScD", .source="<unknown>", .description="generic tag"},
    {.tag="ScD?", .source="<unknown>", .description="Disk"},
    {.tag="ScDA", .source="<unknown>", .description="Info Exceptions"},
    {.tag="ScDa", .source="<unknown>", .description="SMART"},
    {.tag="ScDb", .source="classpnp.sys", .description="ClassPnP debug globals buffer"},
    {.tag="ScDC", .source="<unknown>", .description="disable cache paths"},
    {.tag="ScDc", .source="<unknown>", .description="disk allocated completion c"},
    {.tag="ScDG", .source="<unknown>", .description="disk geometry buffer"},
    {.tag="ScDg", .source="<unknown>", .description="update disk geometry paths"},
    {.tag="ScDI", .source="<unknown>", .description="sense info buffers"},
    {.tag="ScDM", .source="<unknown>", .description="mbr checksum code"},
    {.tag="ScDN", .source="<unknown>", .description="disk name code"},
    {.tag="ScDP", .source="<unknown>", .description="read capacity buffer"},
    {.tag="ScDp", .source="<unknown>", .description="disk partition lists"},
    {.tag="ScDS", .source="<unknown>", .description="srb allocation"},
    {.tag="ScDs", .source="<unknown>", .description="start device paths"},
    {.tag="ScDU", .source="<unknown>", .description="update capacity path"},
    {.tag="ScDW", .source="<unknown>", .description="work"},
    {.tag="ScF?", .source="<unknown>", .description="FtDisk"},
    {.tag="ScFt", .source="<unknown>", .description="FtDisk allocations"},
    {.tag="ScIO", .source="classpnp.sys", .description="ClassPnP device control"},
    {.tag="SCl0", .source="<unknown>", .description="Litronic 220"},
    {.tag="ScL?", .source="classpnp.sys", .description="Classpnp"},
    {.tag="ScLA", .source="classpnp.sys", .description="allocation to check for autorun disable"},
    {.tag="SCLb", .source="<unknown>", .description="Smart card driver library"},
    {.tag="ScLc", .source="classpnp.sys", .description="Cache filters"},
    {.tag="ScLF", .source="classpnp.sys", .description="File Object Extension"},
    {.tag="ScLf", .source="classpnp.sys", .description="Fault prediction"},
    {.tag="ScLM", .source="classpnp.sys", .description="Media Change Detection"},
    {.tag="ScLm", .source="classpnp.sys", .description="Mount"},
    {.tag="ScLq", .source="classpnp.sys", .description="Release queue"},
    {.tag="ScLW", .source="classpnp.sys", .description="Power"},
    {.tag="ScLw", .source="classpnp.sys", .description="WMI"},
    {.tag="ScMC", .source="<unknown>", .description="medium changer allocations"},
    {.tag="ScNo", .source="classpnp.sys", .description="ClassPnP notification"},
    {.tag="ScP?", .source="<unknown>", .description="Scsiport"},
    {.tag="ScPA", .source="<unknown>", .description="Access Ranges"},
    {.tag="ScPa", .source="<unknown>", .description="Hold registry data"},
    {.tag="ScPB", .source="<unknown>", .description="Queuetag BitMap"},
    {.tag="ScPb", .source="<unknown>", .description="Get Bus Dat Holder"},
    {.tag="ScPC", .source="<unknown>", .description="reset bus code"},
    {.tag="ScPc", .source="<unknown>", .description="Fake common buffer"},
    {.tag="ScPD", .source="<unknown>", .description="SRB_DATA allocations"},
    {.tag="ScPd", .source="<unknown>", .description="Pnp id strings"},
    {.tag="ScPE", .source="<unknown>", .description="Scatter gather lists"},
    {.tag="ScPG", .source="<unknown>", .description="Global memory"},
    {.tag="ScPh", .source="<unknown>", .description="HwDevice Ext"},
    {.tag="ScPI", .source="<unknown>", .description="Init data chain"},
    {.tag="ScPi", .source="<unknown>", .description="Sense Info"},
    {.tag="ScPL", .source="<unknown>", .description="scatter gather lists"},
    {.tag="ScPl", .source="<unknown>", .description="remove lock tracking"},
    {.tag="ScPM", .source="<unknown>", .description="scatter gather lists"},
    {.tag="ScPm", .source="<unknown>", .description="address mapping lists"},
    {.tag="ScPp", .source="<unknown>", .description="device & adapter enable"},
    {.tag="ScpP", .source="<unknown>", .description="scsi PortConfig copies"},
    {.tag="ScPQ", .source="<unknown>", .description="request sense"},
    {.tag="ScPq", .source="<unknown>", .description="inquiry data"},
    {.tag="ScPr", .source="<unknown>", .description="resource list copy"},
    {.tag="ScPS", .source="<unknown>", .description="registry allocations"},
    {.tag="ScPT", .source="<unknown>", .description="interface mapping"},
    {.tag="ScPt", .source="<unknown>", .description="legacy request rerouting"},
    {.tag="ScPu", .source="<unknown>", .description="device relation structs"},
    {.tag="ScPV", .source="<unknown>", .description="Device map allocations"},
    {.tag="ScPv", .source="<unknown>", .description="KEVENT"},
    {.tag="ScPW", .source="<unknown>", .description="Wmi Requests"},
    {.tag="ScPw", .source="<unknown>", .description="Wmi Events"},
    {.tag="ScPx", .source="<unknown>", .description="Report Luns"},
    {.tag="ScPY", .source="<unknown>", .description="Report Targets"},
    {.tag="ScPZ", .source="<unknown>", .description="Device name buffer"},
    {.tag="ScR?", .source="<unknown>", .description="Partition Manager"},
    {.tag="ScRi", .source="<unknown>", .description="IOCTL buffer"},
    {.tag="ScRp", .source="<unknown>", .description="Partition entry"},
    {.tag="ScRr", .source="<unknown>", .description="Remove lock"},
    {.tag="ScRt", .source="<unknown>", .description="Table entry"},
    {.tag="ScRV", .source="<unknown>", .description="Volume entry"},
    {.tag="ScRv", .source="<unknown>", .description="Dependant volume relations lists"},
    {.tag="ScRw", .source="<unknown>", .description="Power mgmt private work item"},
    {.tag="Scs$", .source="<unknown>", .description="Tag for pnp class driver's SRB lookaside list"},
    {.tag="SCS4", .source="<unknown>", .description="SCM Microsystems pcmcia reader"},
    {.tag="ScsC", .source="<unknown>", .description="non"},
    {.tag="ScsD", .source="<unknown>", .description="non"},
    {.tag="ScsH", .source="<unknown>", .description="non"},
    {.tag="ScsI", .source="<unknown>", .description="non"},
    {.tag="ScsL", .source="<unknown>", .description="non"},
    {.tag="ScsP", .source="<unknown>", .description="non"},
    {.tag="ScUn", .source="<unknown>", .description="Default Tag for pnp class driver allocations"},
    {.tag="ScV?", .source="<unknown>", .description="Dvd functionality in cdrom.sys"},
    {.tag="ScVK", .source="<unknown>", .description="write buffer for DVD keys"},
    {.tag="ScVk", .source="<unknown>", .description="read buffer for DVD keys"},
    {.tag="ScVS", .source="<unknown>", .description="buffer for reads of DVD on"},
    {.tag="Sdba", .source="<unknown>", .description="Application compatibility Sdb* allocations"},
    {.tag="SdCc", .source="<unknown>", .description="ObsSecurityDescriptorCache / SECURITY_DESCRIPTOR_CACHE_ENTRIES"},
    {.tag="Sdp?", .source="<unknown>", .description="Bluetooth SDP functionality in BTHPORT.sys"},
    {.tag="SdpC", .source="bthport.sys", .description="Bluetooth SDP client connection"},
    {.tag="SdpD", .source="bthport.sys", .description="Bluetooth SDP database"},
    {.tag="SdpI", .source="bthport.sys", .description="Bluetooth port driver (SDP)"},
    {.tag="Se", .source="nt!se", .description="General security allocations"},
    {.tag="SeAc", .source="nt!se", .description="Security ACL"},
    {.tag="SeAi", .source="nt!se", .description="Security Audit Work Item"},
    {.tag="SeAp", .source="nt!se", .description="Security Audit Parameter Record"},
    {.tag="SeCL", .source="nt!se", .description="Security CONTEXT_TAG"},
    {.tag="Sect", .source="<unknown>", .description="Section objects"},
    {.tag="SeDb", .source="nt!se", .description="Temp directory query buffer to delete logon session symbolic links."},
    {.tag="SeFS", .source="nt!se", .description="SEP_FILE_SYSTEM_NOTIFY_CONTEXT"},
    {.tag="SeHa", .source="nt!se", .description="Temp directory query buffer to delete logon session symbolic links."},
    {.tag="SeLS", .source="nt!se", .description="Security Logon Session tracking array"},
    {.tag="SeLs", .source="nt!se", .description="Security Logon Session"},
    {.tag="SeLu", .source="nt!se", .description="Security LUID and Attributes array"},
    {.tag="SeLw", .source="nt!se", .description="Security LSA Work Item"},
    {.tag="Sema", .source="<unknown>", .description="Semaphore objects"},
    {.tag="Senm", .source="<unknown>", .description="Serenum (RS"},
    {.tag="SeOn", .source="nt!se", .description="Security Captured Object Name information"},
    {.tag="SeOt", .source="nt!se", .description="Captured object type array. Used by access check code"},
    {.tag="SePa", .source="nt!se", .description="Process audit image names and captured polity structures"},
    {.tag="SePh", .source="nt!se", .description="Dummy image page hash structure. Used when CI is disabled."},
    {.tag="SePr", .source="nt!se", .description="Security Privilege Set"},
    {.tag="SeSa", .source="nt!se", .description="Security SID and Attributes"},
    {.tag="SeSc", .source="nt!se", .description="Captured Security Descriptor"},
    {.tag="SeSd", .source="nt!se", .description="Security Descriptor"},
    {.tag="SeSi", .source="nt!se", .description="Security SID"},
    {.tag="SeTa", .source="nt!se", .description="Security Temporary Array"},
    {.tag="SeTd", .source="nt!se", .description="Security Token dynamic part"},
    {.tag="SeTI", .source="ksecdd.sys", .description="Security TargetInfo"},
    {.tag="SeTn", .source="nt!se", .description="Security Captured Type Name information"},
    {.tag="Setp", .source="<unknown>", .description="SETUPDD SpMemAlloc calls"},
    {.tag="SeUs", .source="nt!se", .description="Security Captured Unicode string"},
    {.tag="sidg", .source="<unknown>", .description="GDI spooler events"},
    {.tag="SIfs", .source="<unknown>", .description="Default tag for user's of ntsrv.h"},
    {.tag="SimB", .source="<unknown>", .description="Simbad (bad sector simulation driver) allocations"},
    {.tag="Sis", .source="<unknown>", .description="Single Instance Store (ddsisfilter)"},
    {.tag="SisB", .source="<unknown>", .description="SIS per file object break event"},
    {.tag="SisC", .source="<unknown>", .description="SIS common store file object"},
    {.tag="SisF", .source="<unknown>", .description="SIS per file object"},
    {.tag="SisL", .source="<unknown>", .description="SIS per link object"},
    {.tag="SisS", .source="<unknown>", .description="SIS SCB"},
    {.tag="Sm??", .source="<unknown>", .description="rdr2 smb mini"},
    {.tag="SmAd", .source="<unknown>", .description="session setup/admin exchange"},
    {.tag="SmCe", .source="<unknown>", .description="smbmini connection engine"},
    {.tag="SmDc", .source="<unknown>", .description="dir query buffer (special build only)"},
    {.tag="SmDO", .source="<unknown>", .description="deferred open context,(special build only)"},
    {.tag="SmEc", .source="<unknown>", .description="echo buffer,(special build only)"},
    {.tag="SmFc", .source="<unknown>", .description="fsctl structures,(special build only)"},
    {.tag="SmKs", .source="<unknown>", .description="Kerberos blob,(special build only)"},
    {.tag="SmMa", .source="<unknown>", .description="mid atlas,(special build only)"},
    {.tag="SmMm", .source="<unknown>", .description="smbmini managed datastructures"},
    {.tag="SmMs", .source="<unknown>", .description="misc."},
    {.tag="SmMt", .source="<unknown>", .description="mailslot buffer,(special build only)"},
    {.tag="SmNr", .source="<unknown>", .description="NetRoot,(special build only)"},
    {.tag="SmPi", .source="<unknown>", .description="pipeinfo buffer (special build only)"},
    {.tag="SmQP", .source="<unknown>", .description="params for directory query transact,(special build only)"},
    {.tag="SmRb", .source="<unknown>", .description="remote boot"},
    {.tag="SmRw", .source="<unknown>", .description="read/write path"},
    {.tag="SmRx", .source="<unknown>", .description="minirdr generated RxContext,(special build only)"},
    {.tag="SmSe", .source="<unknown>", .description="Session,(special build only)"},
    {.tag="SmSr", .source="<unknown>", .description="Server,(special build only)"},
    {.tag="SmTp", .source="<unknown>", .description="server transport tag"},
    {.tag="SmTr", .source="<unknown>", .description="transact exchange"},
    {.tag="SmVc", .source="<unknown>", .description="smbmini connectionengine VC,(special build only)"},
    {.tag="SmVr", .source="<unknown>", .description="VNetroot,(special build only)"},
    {.tag="SNBX", .source="SandBox.sys", .description="Agnitum Outpost Firewall//'s Host Protection Component"},
    {.tag="SPX", .source="<unknown>", .description="Nwlnkspx transport"},
    {.tag="SQOS", .source="<unknown>", .description="Security quality of service in IO"},
    {.tag="Sr??", .source="sr.sys", .description="System Restore file system filter driver"},
    {.tag="SrCo", .source="sr.sys", .description="SR's control object"},
    {.tag="SrDB", .source="sr.sys", .description="Debug information for lookup blob"},
    {.tag="SrDL", .source="sr.sys", .description="Device list"},
    {.tag="SRdm", .source="scsirdma.sys", .description="Infiniband SRP driver"},
    {.tag="SrFE", .source="sr.sys", .description="File information buffer"},
    {.tag="SrFN", .source="sr.sys", .description="File name"},
    {.tag="SrHB", .source="sr.sys", .description="Hash bucket"},
    {.tag="SrHH", .source="sr.sys", .description="Hash header"},
    {.tag="SrHK", .source="sr.sys", .description="Hash key"},
    {.tag="SrLB", .source="sr.sys", .description="Log buffer"},
    {.tag="SrLC", .source="sr.sys", .description="Logging context"},
    {.tag="SrLE", .source="sr.sys", .description="Log entry"},
    {.tag="SrLT", .source="sr.sys", .description="Lookup blob"},
    {.tag="SrMP", .source="sr.sys", .description="Mount point information"},
    {.tag="SrOI", .source="sr.sys", .description="Overwrite information"},
    {.tag="SrPC", .source="sr.sys", .description="Persistant configuration information"},
    {.tag="SrRB", .source="sr.sys", .description="Rename buffer"},
    {.tag="SrRG", .source="sr.sys", .description="Logger context"},
    {.tag="SrRH", .source="sr.sys", .description="Reparse data size"},
    {.tag="SrRR", .source="sr.sys", .description="Registry information"},
    {.tag="SrSC", .source="sr.sys", .description="Stream contexts"},
    {.tag="SrSD", .source="sr.sys", .description="Security data information"},
    {.tag="SrST", .source="sr.sys", .description="Stream data information"},
    {.tag="SrTI", .source="sr.sys", .description="Directory delete information"},
    {.tag="SrWI", .source="sr.sys", .description="Work queue item"},
    {.tag="SslC", .source="ksecdd.sys", .description="SSL kernel mode client allocations"},
    {.tag="ST*", .source="<unknown>", .description="New MMC compliant storage drivers"},
    {.tag="Stac", .source="<unknown>", .description="Stack Trace Database"},
    {.tag="STli", .source="", .description="Alter//'s NT kernel string manipulation library"},
    {.tag="Strg", .source="<unknown>", .description="Dynamic Translated strings"},
    {.tag="Strm", .source="<unknown>", .description="Streams and streams transports allocations"},
    {.tag="SW??", .source="<unknown>", .description="Software Bus Enumerator"},
    {.tag="SWbi", .source="<unknown>", .description="bus ID"},
    {.tag="SWbr", .source="<unknown>", .description="bus reference"},
    {.tag="SWda", .source="<unknown>", .description="POOLTAG_DEVICE_ASSOCIATION"},
    {.tag="SWdn", .source="<unknown>", .description="device name"},
    {.tag="SWdr", .source="<unknown>", .description="POOLTAG_DEVICE_DRIVER_REGISTRY"},
    {.tag="SWfd", .source="<unknown>", .description="POOLTAG_DEVICE_FDOEXTENSION"},
    {.tag="SWid", .source="<unknown>", .description="device ID"},
    {.tag="SWii", .source="<unknown>", .description="instance ID"},
    {.tag="SWip", .source="<unknown>", .description="POOLTAG_DEVICE_INTERFACEPATH"},
    {.tag="SWki", .source="<unknown>", .description="key information"},
    {.tag="SwMi", .source="<unknown>", .description="SWMidi KS filter (WDM Audio)"},
    {.tag="SWpd", .source="<unknown>", .description="POOLTAG_DEVICE_PDOEXTENSION"},
    {.tag="SWre", .source="<unknown>", .description="relations"},
    {.tag="SWrp", .source="<unknown>", .description="reparse string"},
    {.tag="SWrs", .source="<unknown>", .description="reference string"},
    {.tag="Symb", .source="<unknown>", .description="Symbolic link objects"},
    {.tag="Symt", .source="<unknown>", .description="Symbolic link target strings"},
    {.tag="SYPK", .source="syspart.lib", .description="Kernel mode system partition detection allocations"},
    {.tag="SYSA", .source="<unknown>", .description="Sysaudio (wdm audio)"},
    {.tag="TAPI", .source="<unknown>", .description="ntos/ndis/ndistapi"},
    {.tag="TC??", .source="TCP", .description="TCP/IP network protocol"},
    {.tag="TCh?", .source="<unknown>", .description="TCP/IP header pools"},
    {.tag="TCPC", .source="<unknown>", .description="TCP connection pool"},
    {.tag="TCPr", .source="<unknown>", .description="TCP request pool"},
    {.tag="TCPT", .source="<unknown>", .description="TCB pool"},
    {.tag="TCPY", .source="<unknown>", .description="SYN"},
    {.tag="TDIc", .source="<unknown>", .description="TDI resource"},
    {.tag="TDId", .source="<unknown>", .description="TDI resource"},
    {.tag="TDIe", .source="<unknown>", .description="TDI resource"},
    {.tag="TDIf", .source="<unknown>", .description="TDI resource"},
    {.tag="TDIg", .source="<unknown>", .description="TDI resource"},
    {.tag="TDIk", .source="<unknown>", .description="TDI resource"},
    {.tag="TDIu", .source="<unknown>", .description="TDI resource"},
    {.tag="TDIv", .source="<unknown>", .description="TDI resource"},
    {.tag="thdd", .source="<unknown>", .description="DirectDraw/3D handle manager table"},
    {.tag="Thre", .source="nt!ps", .description="Thread objects"},
    {.tag="Thr\xe5", .source="nt!ps", .description="Thread objects"},
    {.tag="Thrm", .source="<unknown>", .description="Thermal zone structure"},
    {.tag="Time", .source="nt!ke", .description="Timer objects"},
    {.tag="TmDn", .source="nt!tm", .description="Tm Dynamic Name"},
    {.tag="TmLo", .source="nt!tm", .description="Tm Log Entries"},
    {.tag="TmNo", .source="nt!tm", .description="Tm Notification"},
    {.tag="TmPa", .source="nt!tm", .description="Tm Propagate Argument"},
    {.tag="TmPb", .source="nt!tm", .description="Tm Propagation Buffer"},
    {.tag="TmPe", .source="nt!tm", .description="Tm Enlistment Pointers"},
    {.tag="TmPi", .source="nt!tm", .description="Tm Protocol Information"},
    {.tag="TmPo", .source="nt!tm", .description="Tm Propagation Output"},
    {.tag="TmPp", .source="nt!tm", .description="Tm Protocol Pointers"},
    {.tag="TmPr", .source="nt!tm", .description="Tm Protocol"},
    {.tag="TmPx", .source="nt!tm", .description="Tm Protocol Array"},
    {.tag="TmRi", .source="nt!tm", .description="Tm Recovery Information"},
    {.tag="TmRq", .source="nt!tm", .description="Tm Propagation Request"},
    {.tag="Toke", .source="nt!se", .description="Token objects"},
    {.tag="TpWc", .source="nt!ex", .description="Threadpool minipacket context"},
    {.tag="TpWo", .source="nt!ex", .description="Threadpool worker factory objects"},
    {.tag="Tran", .source="<unknown>", .description="EXIFS Translate"},
    {.tag="TSBV", .source="<unknown>", .description="WDM mini driver for Toshiba 750 capture"},
    {.tag="TSch", .source="rdpwd.sys", .description="RDPWD"},
    {.tag="TSdd", .source="rdpdd.sys", .description="RDPDD"},
    {.tag="TSic", .source="termdd.sys", .description="Terminal Services"},
    {.tag="TSlc", .source="rdpwd.sys", .description="RDPWD"},
    {.tag="TSmc", .source="<unknown>", .description="PDMCS"},
    {.tag="Tspk", .source="ksecdd.sys", .description="TS Package kernel mode client allocations"},
    {.tag="TSq", .source="<unknown>", .description="Terminal Services"},
    {.tag="TSrp", .source="termdd.sys", .description="Terminal Services"},
    {.tag="TSwd", .source="rdpwd.sys", .description="RDPWD"},
    {.tag="TTFC", .source="<unknown>", .description="Font file cache"},
    {.tag="Ttfd", .source="<unknown>", .description="TrueType Font driver"},
    {.tag="Tun4", .source="<unknown>", .description="Tunnel cache allocation for long file name"},
    {.tag="TunK", .source="<unknown>", .description="Tunnel cache temporary key value"},
    {.tag="TunL", .source="<unknown>", .description="Tunnel cache lookaside"},
    {.tag="TunP", .source="<unknown>", .description="Tunnel cache oddsized pool"},
    {.tag="Txcl", .source="ntfs.sys", .description="TXF_CLR_RESERVATION_CHUNK"},
    {.tag="Txdl", .source="ntfs.sys", .description="TXF_DELETED_LINK"},
    {.tag="Txdr", .source="ntfs.sys", .description="TXF_DEFAULT_READER_SECTION"},
    {.tag="Txfc", .source="ntfs.sys", .description="TXF_FCB"},
    {.tag="Txfe", .source="ntfs.sys", .description="TXF_FCB_EXTENSION"},
    {.tag="Txfi", .source="ntfs.sys", .description="TXF_FCB_INFO"},
    {.tag="Txfl", .source="ntfs.sys", .description="TXF_FCB_CLEANUP"},
    {.tag="Txfo", .source="ntfs.sys", .description="TXF_FO"},
    {.tag="Txfq", .source="ntfs.sys", .description="Txf quota block"},
    {.tag="Txgd", .source="ntfs.sys", .description="TxfData global structure"},
    {.tag="Txis", .source="ntfs.sys", .description="TXF_ISO_SNAPSHOT"},
    {.tag="Txlf", .source="ntfs.sys", .description="TXF_FCB (large)"},
    {.tag="Txls", .source="ntfs.sys", .description="TXF_CANCEL_LSN"},
    {.tag="Txre", .source="ntfs.sys", .description="TXF_TOPS_RANGE_ENTRY"},
    {.tag="Txsc", .source="ntfs.sys", .description="TXF_SCB"},
    {.tag="Txsp", .source="ntfs.sys", .description="TXF_SCB_PTR"},
    {.tag="Txtc", .source="ntfs.sys", .description="TXF_TRANS_CANCEL_LIST"},
    {.tag="Txtr", .source="ntfs.sys", .description="TXF_TRANS (Txf transaction context)"},
    {.tag="Txvc", .source="ntfs.sys", .description="TXF_VCB"},
    {.tag="Txvd", .source="ntfs.sys", .description="TXF_VSCB_TO_DEREF"},
    {.tag="Txvf", .source="ntfs.sys", .description="TXF_VSCB_FILE_SIZES"},
    {.tag="Txvl", .source="ntfs.sys", .description="TXF_VSCB"},
    {.tag="Type", .source="<unknown>", .description="Type objects"},
    {.tag="UAhH", .source="QPbBFmBiEHZmZzLnoU", .description="comment1"},
    {.tag="Uata", .source="uniata.sys", .description="Alter//'s UniATA driver allocations"},
    {.tag="Uc??", .source="http.sys", .description="i.e."},
    {.tag="Ucac", .source="http.sys", .description="Auth Cache Pool"},
    {.tag="UCAM", .source="<unknown>", .description="USB digital camera library"},
    {.tag="UcCO", .source="http.sys", .description="Client Connection"},
    {.tag="Ucmp", .source="http.sys", .description="Multipart String Buffer"},
    {.tag="Ucre", .source="http.sys", .description="Receive Response"},
    {.tag="Ucrp", .source="http.sys", .description="Response App Buffer"},
    {.tag="Ucrq", .source="http.sys", .description="Request Pool"},
    {.tag="UcSc", .source="http.sys", .description="Common Server Information"},
    {.tag="UcSN", .source="http.sys", .description="Server name"},
    {.tag="UcSP", .source="http.sys", .description="Process Server Information"},
    {.tag="UcSp", .source="http.sys", .description="Sspi Pool"},
    {.tag="UcST", .source="http.sys", .description="Server info table"},
    {.tag="Uctd", .source="http.sys", .description="Response Tdi Buffer"},
    {.tag="Ucte", .source="http.sys", .description="Entity Pool"},
    {.tag="Ucto", .source="http.sys", .description="Tdi Objects Pool"},
    {.tag="Udf1", .source="<unknown>", .description="Udfs file set descriptor buffer"},
    {.tag="Udf2", .source="<unknown>", .description="Udfs volume descriptor sequence descriptor buffer"},
    {.tag="Udfb", .source="<unknown>", .description="Udfs IO buffer"},
    {.tag="UdfC", .source="<unknown>", .description="Udfs CRC table"},
    {.tag="Udfc", .source="<unknown>", .description="Udfs IRP context"},
    {.tag="UdfD", .source="<unknown>", .description="Udfs FID buffer for view spanning"},
    {.tag="Udfd", .source="<unknown>", .description="Udfs file Fcb"},
    {.tag="Udfe", .source="<unknown>", .description="Udfs enumeration match expression"},
    {.tag="UdfF", .source="<unknown>", .description="Udfs nonpaged Fcb errata"},
    {.tag="Udff", .source="<unknown>", .description="Udfs normalized full filename"},
    {.tag="UdfI", .source="<unknown>", .description="Udfs IO context"},
    {.tag="Udfi", .source="<unknown>", .description="Udfs directory Fcb"},
    {.tag="UdfL", .source="<unknown>", .description="Udfs IRP context lite (delayed close)"},
    {.tag="Udfl", .source="<unknown>", .description="Udfs Lcb"},
    {.tag="Udfp", .source="<unknown>", .description="Udfs Pcb"},
    {.tag="UdfS", .source="<unknown>", .description="Udfs short file name"},
    {.tag="Udfs", .source="<unknown>", .description="Udfs Sparing Mcb"},
    {.tag="UdfT", .source="<unknown>", .description="Udfs generic table entry"},
    {.tag="Udft", .source="<unknown>", .description="Udfs CDROM TOC"},
    {.tag="UDFV", .source="<unknown>", .description="Udfs volume descriptor sequence descriptor buffer"},
    {.tag="Udfv", .source="<unknown>", .description="Udfs Vpb"},
    {.tag="Udfx", .source="<unknown>", .description="Udfs Ccb"},
    {.tag="Udp", .source="<unknown>", .description="Udp protocol (TCP/IP driver)"},
    {.tag="Ufsc", .source="<unknown>", .description="User FULLSCREEN"},
    {.tag="UHCD", .source="<unknown>", .description="Universal Host Controller (USB"},
    {.tag="UHUB", .source="<unknown>", .description="Universal Serial Bus Hub"},
    {.tag="Ul??", .source="http.sys", .description="tags. Note: In"},
    {.tag="UlAB", .source="http.sys", .description="Auxiliary Buffer"},
    {.tag="UlAO", .source="http.sys", .description="App Pool Object"},
    {.tag="UlAP", .source="http.sys", .description="App Pool Process"},
    {.tag="UlBL", .source="http.sys", .description="Binary Log File Entry"},
    {.tag="UlBO", .source="http.sys", .description="Outstanding i/o"},
    {.tag="UlCC", .source="http.sys", .description="Control Channel"},
    {.tag="UlCE", .source="http.sys", .description="Config Group Tree Entry"},
    {.tag="UlCH", .source="http.sys", .description="Config Group Tree Header"},
    {.tag="UlCI", .source="http.sys", .description="Config Group URL Info"},
    {.tag="UlCJ", .source="http.sys", .description="Config Group Object Pool"},
    {.tag="UlCK", .source="http.sys", .description="Chunk Tracker"},
    {.tag="UlCL", .source="http.sys", .description="Config Group LogDir"},
    {.tag="UlCl", .source="http.sys", .description="Connection RefTraceLog"},
    {.tag="UlCO", .source="http.sys", .description="Connection"},
    {.tag="UlCT", .source="http.sys", .description="Config Group Timestamp"},
    {.tag="UlCY", .source="http.sys", .description="Connection Count Entry"},
    {.tag="UlDB", .source="http.sys", .description="Debug"},
    {.tag="UlDC", .source="http.sys", .description="Data Chunks array"},
    {.tag="UlDO", .source="http.sys", .description="Disconnect Object"},
    {.tag="UlDR", .source="http.sys", .description="Deferred Remove Item"},
    {.tag="UlDT", .source="http.sys", .description="Debug Thread Pool"},
    {.tag="UlEP", .source="http.sys", .description="Endpoint"},
    {.tag="UlFA", .source="http.sys", .description="Force Abort Work Item"},
    {.tag="UlFC", .source="http.sys", .description="File Cache Entry"},
    {.tag="Ulfc", .source="http.sys", .description="Uri Filter Context"},
    {.tag="UlFD", .source="http.sys", .description="Noncached File Data"},
    {.tag="UlFP", .source="http.sys", .description="Filter Process"},
    {.tag="UlFR", .source="http.sys", .description="Dummy Filter Receive Buffer"},
    {.tag="UlFT", .source="http.sys", .description="Filter Channel"},
    {.tag="UlFU", .source="http.sys", .description="Full Tracker"},
    {.tag="UlFW", .source="http.sys", .description="Filter Write Tracker"},
    {.tag="UlHC", .source="http.sys", .description="Http Connection"},
    {.tag="UlHc", .source="http.sys", .description="Http Connection RefTraceLog"},
    {.tag="UlHL", .source="http.sys", .description="Internal Request RefTraceLog"},
    {.tag="UlHR", .source="http.sys", .description="Internal Request"},
    {.tag="UlHT", .source="http.sys", .description="Hash Table"},
    {.tag="UlHV", .source="http.sys", .description="Header Value"},
    {.tag="UlIC", .source="http.sys", .description="Irp Context"},
    {.tag="UlID", .source="http.sys", .description="Conn ID Table"},
    {.tag="UlIR", .source="http.sys", .description="Internal Response"},
    {.tag="UlLD", .source="http.sys", .description="Log Field"},
    {.tag="UlLF", .source="http.sys", .description="Log File Entry"},
    {.tag="UlLG", .source="http.sys", .description="Log Generic"},
    {.tag="UlLH", .source="http.sys", .description="Log File Handle"},
    {.tag="UlLL", .source="http.sys", .description="Log File Buffer"},
    {.tag="UlLS", .source="http.sys", .description="Ansi Log Data Buffer"},
    {.tag="UlLT", .source="http.sys", .description="Binary Log Data Buffer"},
    {.tag="UlNO", .source="http.sys", .description="NSGO Pool"},
    {.tag="UlNP", .source="http.sys", .description="Non"},
    {.tag="UlOE", .source="http.sys", .description="Endpoint OwnerRefTraceLog PoolTag"},
    {.tag="UlOR", .source="http.sys", .description="Owner RefTrace Signature"},
    {.tag="UlOT", .source="http.sys", .description="Opaque ID Table"},
    {.tag="UlPB", .source="http.sys", .description="APool Proc Binding"},
    {.tag="UlPL", .source="http.sys", .description="Pipeline"},
    {.tag="UlQF", .source="http.sys", .description="TCI Filter"},
    {.tag="UlQG", .source="http.sys", .description="TCI Generic"},
    {.tag="UlQI", .source="http.sys", .description="TCI Interface"},
    {.tag="UlQL", .source="http.sys", .description="TCI Flow"},
    {.tag="UlQT", .source="http.sys", .description="TCI Tracker"},
    {.tag="UlQW", .source="http.sys", .description="TCI WMI"},
    {.tag="UlRB", .source="http.sys", .description="Receive Buffer"},
    {.tag="UlRD", .source="http.sys", .description="Registry Data"},
    {.tag="UlRE", .source="http.sys", .description="Request Body Buffer"},
    {.tag="UlRP", .source="http.sys", .description="Request Buffer"},
    {.tag="UlRR", .source="http.sys", .description="Request Buffer References"},
    {.tag="UlRS", .source="http.sys", .description="Non"},
    {.tag="UlRT", .source="http.sys", .description="RefTraceLog PoolTag"},
    {.tag="UlSC", .source="http.sys", .description="SSL Cert Data"},
    {.tag="UlSD", .source="http.sys", .description="Security Data"},
    {.tag="UlSL", .source="http.sys", .description="StringLog PoolTag"},
    {.tag="UlSl", .source="http.sys", .description="StringLog Buffer PoolTag"},
    {.tag="UlSO", .source="http.sys", .description="Site Counter Entry"},
    {.tag="UlSS", .source="http.sys", .description="Simple Status Item"},
    {.tag="UlTA", .source="http.sys", .description="Address Pool"},
    {.tag="UlTD", .source="http.sys", .description="UL_TRANSPORT_ADDRESS"},
    {.tag="UlTT", .source="http.sys", .description="Thread Tracker"},
    {.tag="UlUB", .source="http.sys", .description="URL Buffer"},
    {.tag="UlUC", .source="http.sys", .description="Uri Cache Entry"},
    {.tag="UlUH", .source="http.sys", .description="HTTP Unknown Header"},
    {.tag="UlUL", .source="http.sys", .description="URL"},
    {.tag="UlUM", .source="http.sys", .description="URL Map"},
    {.tag="UlVH", .source="http.sys", .description="Virtual Host"},
    {.tag="UlWC", .source="http.sys", .description="Work Context"},
    {.tag="UlWI", .source="http.sys", .description="Work Item"},
    {.tag="UndP", .source="<unknown>", .description="EXIFS Underlying Path"},
    {.tag="Urdr", .source="win32k!SetRedirectionBitmap", .description="REDIRECT"},
    {.tag="Usac", .source="win32k!_CreateAcceleratorTable", .description="ACCEL"},
    {.tag="Usai", .source="win32k!zzzAttachThreadInput", .description="ATTACHINFO"},
    {.tag="Usal", .source="win32k!InitSwitchWndInfo", .description="ALTTAB"},
    {.tag="USBB", .source="bthusb.sys", .description="Bluetooth USB minidriver"},
    {.tag="USBD", .source="<unknown>", .description="Universal Serial Bus Class Driver"},
    {.tag="Usbg", .source="win32k!xxxLogClipData", .description="DEBUG"},
    {.tag="Uscb", .source="win32k!_ConvertMemHandle", .description="CLIPBOARD"},
    {.tag="Uscc", .source="win32k!AllocCallbackMessage", .description="CALLBACK"},
    {.tag="Usci", .source="win32k!InitSystemThread", .description="CLIENTTHREADINFO"},
    {.tag="Uscl", .source="win32k!ClassAlloc", .description="CLASS"},
    {.tag="Uscm", .source="win32k!InitScancodeMap", .description="SCANCODEMAP"},
    {.tag="Uscp", .source="win32k!CreateDIBPalette", .description="CLIPBOARDPALETTE"},
    {.tag="Uscr", .source="win32k!NtUserSetSysColors", .description="COLORS"},
    {.tag="Usct", .source="win32k!CkptRestore", .description="CHECKPT"},
    {.tag="Uscu", .source="win32k!_CreateEmptyCursorObject", .description="CURSOR"},
    {.tag="Uscv", .source="win32k!NtUserSetSysColors", .description="COLORVALUES"},
    {.tag="Usd1", .source="win32k!FreeListAdd", .description="DDE1"},
    {.tag="Usd2", .source="win32k!_DdeSetQualityOfService", .description="DDE2"},
    {.tag="Usd4", .source="win32k!AddPublicObject", .description="DDE4"},
    {.tag="Usd5", .source="win32k!xxxCsEvent", .description="DDE5"},
    {.tag="Usd6", .source="win32k!xxxCsEvent", .description="DDE6"},
    {.tag="Usd7", .source="win32k!xxxCsEvent", .description="DDE7"},
    {.tag="Usd8", .source="win32k!xxxMessageEvent", .description="DDE8"},
    {.tag="Usd9", .source="win32k!xxxCsDdeInitialize", .description="DDE9"},
    {.tag="UsdA", .source="win32k!NewConversation", .description="DDEa"},
    {.tag="UsdB", .source="win32k!Createpxs", .description="DDEb"},
    {.tag="Usdc", .source="win32k!CreateCacheDC", .description="DCE"},
    {.tag="UsdD", .source="win32k!NtUserfnDDEINIT", .description="DDEd"},
    {.tag="UsdE", .source="win32k!xxxClientCopyDDEIn1", .description="DDE"},
    {.tag="UsDI", .source="win32k!CreateDeviceInfo", .description="DEVICEINFO"},
    {.tag="Usdi", .source="win32k!CreateMonitor", .description="DISPLAYINFO"},
    {.tag="Usds", .source="win32k!xxxDragObject", .description="DRAGDROP"},
    {.tag="Usdv", .source="win32k!NtUserfnINDEVICECHANGE", .description="DEVICECHANGE"},
    {.tag="User", .source="win32k!InitCreateUserCrit", .description="ERESOURCE"},
    {.tag="Usev", .source="win32k!xxxPollAndWaitForSingleObject", .description="EVENT"},
    {.tag="Usgh", .source="win32k!NtUserUserHandleGrantAccess", .description="GRANTEDHANDLES"},
    {.tag="Usgl", .source="win32k!CreateShadowTL", .description="GLOBALTHREADLOCK"},
    {.tag="Usgt", .source="win32k!AddGhost", .description="GHOST"},
    {.tag="Usha", .source="win32k!AllocateHidData", .description="HIDDATA"},
    {.tag="UshD", .source="Win32k!AllocateHidDesc", .description="HIDDESC"},
    {.tag="Ushk", .source="win32k!_RegisterHotKey", .description="HOTKEY"},
    {.tag="Usih", .source="win32k!SetImeHotKey", .description="IMEHOTKEY"},
    {.tag="Usim", .source="win32k!CreateInputContext", .description="IME"},
    {.tag="Usjb", .source="win32k!CreateW32Job", .description="W32JOB"},
    {.tag="Usjx", .source="win32k!JobCalloutAddProcess", .description="W32JOBEXTRA"},
    {.tag="Uskb", .source="win32k!xxxLoadKeyboardLayoutEx", .description="KBDLAYOUT"},
    {.tag="Uske", .source="win32k!GetKbdExId", .description="KBDEXID"},
    {.tag="Uskf", .source="win32k!LoadKeyboardLayoutFile", .description="KBDFILE"},
    {.tag="Usks", .source="win32k!PostUpdateKeyStateEvent", .description="KBDSTATE"},
    {.tag="Uskt", .source="win32k!ReadLayoutFile", .description="KBDTABLE"},
    {.tag="Usla", .source="win32k!InitLockRecordLookaside", .description="LOOKASIDE"},
    {.tag="Usld", .source="win32k!GrowLogIfNecessary", .description="LOGDESKTOP"},
    {.tag="Uslr", .source="win32k!InitLockRecordLookaside", .description="LOCKRECORD"},
    {.tag="Usmi", .source="win32k!MirrorRegion", .description="MIRROR"},
    {.tag="Usml", .source="win32k!MsgLookupTableAlloc", .description="MESSAGE FILTER TABLE"},
    {.tag="Usmr", .source="win32k!SnapshotMonitorRects", .description="MONITORRECTS"},
    {.tag="Usms", .source="win32k!xxxMoveSize", .description="MOVESIZE"},
    {.tag="Usmt", .source="win32k!xxxMNAllocMenuState", .description="MENUSTATE"},
    {.tag="Usno", .source="win32k!zzz", .description="NONE"},
    {.tag="Usny", .source="win32k!CreateNotify", .description="NOTIFY"},
    {.tag="Uspi", .source="win32k!MapDesktop", .description="PROCESSINFO"},
    {.tag="Uspm", .source="win32k!MNAllocPopup", .description="POPUPMENU"},
    {.tag="Uspn", .source="win32k!CreateProfileUserName", .description="PROFILEUSERNAME"},
    {.tag="Uspo", .source="win32k!QueuePowerRequest", .description="POWER"},
    {.tag="Uspp", .source="win32k!AllocateAndLinkHidTLCInfo", .description="PNP"},
    {.tag="Uspr", .source="win32k!GetPrivateProfileStruct", .description="PROFILE"},
    {.tag="Usqm", .source="win32k!InitQEntryLookaside", .description="QMSG"},
    {.tag="Usqu", .source="win32k!InitQEntryLookaside", .description="Q"},
    {.tag="Usrt", .source="win32k!xxxDrawMenuItemText", .description="RTL"},
    {.tag="Ussa", .source="win32k!xxxBroadcastMessage", .description="SMS_ASYNC"},
    {.tag="Ussb", .source="win32k!CreateSpb", .description="SPB"},
    {.tag="Ussc", .source="win32k!xxxInterSendMsgEx", .description="SMS_CAPTURE"},
    {.tag="Ussd", .source="win32k!xxxAddShadow", .description="SHADOW"},
    {.tag="Usse", .source="win32k!SetDisconnectDesktopSecurity", .description="SECURITY"},
    {.tag="Ussi", .source="win32k!NtUserSendInput", .description="SENDINPUT"},
    {.tag="Ussm", .source="win32k!InitSMSLookaside", .description="SMS"},
    {.tag="Usss", .source="win32k!xxxBroadcastMessage", .description="SMS_STRING"},
    {.tag="Usst", .source="win32k!xxxSBTrackInit", .description="SCROLLTRACK"},
    {.tag="Ussw", .source="win32k!_BeginDeferWindowPos", .description="SWP"},
    {.tag="Ussy", .source="win32k!xxxDesktopThread", .description="SYSTEM"},
    {.tag="Ustd", .source="win32k!TrackAddDesktop", .description="TRACKDESKTOP"},
    {.tag="Usti", .source="win32k!AllocateW32Thread", .description="THREADINFO"},
    {.tag="Ustk", .source="win32k!HeavyAllocPool", .description="STACK"},
    {.tag="Ustm", .source="win32k!InternalSetTimer", .description="TIMER"},
    {.tag="Usto", .source="win32k!xxxConnectService", .description="TOKEN"},
    {.tag="Usts", .source="win32k!_Win32CreateSection", .description="SECTION"},
    {.tag="Ustx", .source="win32k!NtUserDrawCaptionTemp", .description="TEXT"},
    {.tag="Usty", .source="win32k!NtUserResolveDesktopForWOW", .description="TEXT2"},
    {.tag="Usub", .source="win32k!NtUserToUnicodeEx", .description="UNICODEBUFFER"},
    {.tag="Usvi", .source="win32k!ResizeVisExcludeMemory", .description="VISRGN"},
    {.tag="Usvl", .source="win32k!VWPLAdd", .description="VWPL"},
    {.tag="Uswd", .source="win32k!xxxCreateWindowEx", .description="WINDOW"},
    {.tag="Uswe", .source="win32k!_SetWinEventHook", .description="WINEVENT"},
    {.tag="Uswl", .source="win32k!BuildHwndList", .description="WINDOWLIST"},
    {.tag="Uswo", .source="win32k!zzzInitTask", .description="WOWTDB"},
    {.tag="Uswp", .source="win32k!xxxRegisterUserHungAppHandlers", .description="WOWPROCESSINFO"},
    {.tag="Uswt", .source="win32k!xxxUserNotifyProcessCreate", .description="WOWTHREADINFO"},
    {.tag="Uvpb", .source="dwudf.sys", .description="(DVD Write Now) VPB"},
    {.tag="Vad", .source="nt!mm", .description="Mm virtual address descriptors"},
    {.tag="Vad\x20", .source="nt!mm", .description="Mm virtual address descriptors"},
    {.tag="VadF", .source="nt!mm", .description="VADs created by a FreeVM splitting"},
    {.tag="Vadl", .source="nt!mm", .description="Mm virtual address descriptors (long)"},
    {.tag="VadS", .source="nt!mm", .description="Mm virtual address descriptors (short)"},
    {.tag="Vadm", .source="nt!mm", .description="Mm virtual address descriptors"},
    {.tag="VBus", .source="vmbus.sys", .description="Virtual Machine Bus Driver"},
    {.tag="VDM", .source="nt!vdm", .description="ntosvdm"},
    {.tag="VdPN", .source="dxgkrnl.sys", .description="Video display mode management"},
    {.tag="VfIT", .source="nt!Vf", .description="Verifier Import Address Table information"},
    {.tag="VidL", .source="videoprt.sys", .description="VideoPort Allocation List (FDO_EXTENSION)"},
    {.tag="VidR", .source="videoprt.sys", .description="VideoPort Allocation on behalf of Miniport"},
    {.tag="ViMm", .source="dxgkrnl.sys", .description="Video memory manager"},
    {.tag="virt", .source="vmm.sys", .description="Virtual Machine Manager (VPC/VS)"},
    {.tag="ViSh", .source="dxgkrnl.sys", .description="Video scheduler"},
    {.tag="VM", .source="volmgr.sys", .description="General allocations"},
    {.tag="Vm", .source="volmgrx.sys", .description="General allocations"},
    {.tag="VM??", .source="volmgr.sys", .description="Volume Manager"},
    {.tag="Vm??", .source="volmgrx.sys", .description="Volume Manager Extension"},
    {.tag="VmBl", .source="volmgrx.sys", .description="Raw configuration blocks"},
    {.tag="VmBu", .source="volmgrx.sys", .description="I/O buffers"},
    {.tag="VmCc", .source="volmgrx.sys", .description="Configuration copies"},
    {.tag="VmCo", .source="volmgrx.sys", .description="Configurations"},
    {.tag="VmCp", .source="volmgrx.sys", .description="Copies"},
    {.tag="VmCr", .source="volmgrx.sys", .description="Completion routine contexts"},
    {.tag="VmDc", .source="volmgrx.sys", .description="Device changes"},
    {.tag="VmDd", .source="volmgrx.sys", .description="Disk devices"},
    {.tag="VmDh", .source="volmgrx.sys", .description="Disk headers"},
    {.tag="VmLa", .source="volmgrx.sys", .description="Drive layouts"},
    {.tag="VmLb", .source="volmgrx.sys", .description="Log blocks"},
    {.tag="VmLc", .source="volmgrx.sys", .description="Log copies"},
    {.tag="VmLo", .source="volmgrx.sys", .description="Logs"},
    {.tag="VmLr", .source="volmgrx.sys", .description="Log raw content"},
    {.tag="VmMm", .source="volmgrx.sys", .description="Mirror emergency mappings"},
    {.tag="VmNe", .source="volmgrx.sys", .description="Notification entries"},
    {.tag="VmOb", .source="volmgrx.sys", .description="I/O objects"},
    {.tag="VmP0", .source="volmgrx.sys", .description="Packets"},
    {.tag="VmP1", .source="volmgrx.sys", .description="Small packets"},
    {.tag="VmP2", .source="volmgrx.sys", .description="Large packets"},
    {.tag="VmP3", .source="volmgrx.sys", .description="Huge packets"},
    {.tag="VmPa", .source="volmgrx.sys", .description="Packs"},
    {.tag="VmPd", .source="volmgrx.sys", .description="Physical disks"},
    {.tag="VmPs", .source="volmgrx.sys", .description="Arrays of packets"},
    {.tag="VmRb", .source="volmgrx.sys", .description="Raw record buffers"},
    {.tag="VmRc", .source="volmgrx.sys", .description="Raw configurations"},
    {.tag="VmRe", .source="volmgrx.sys", .description="Records"},
    {.tag="VmRi", .source="volmgrx.sys", .description="Record information"},
    {.tag="VmRm", .source="volmgrx.sys", .description="RAID"},
    {.tag="VmRr", .source="volmgrx.sys", .description="Raw records"},
    {.tag="VmTa", .source="volmgrx.sys", .description="I/O tasks"},
    {.tag="VmTc", .source="volmgrx.sys", .description="Table of contents"},
    {.tag="VmTe", .source="volmgrx.sys", .description="Table of contents entries"},
    {.tag="VmTx", .source="volmgrx.sys", .description="Transactions"},
    {.tag="VmUe", .source="volmgrx.sys", .description="User entries"},
    {.tag="VmVd", .source="volmgrx.sys", .description="Volume devices"},
    {.tag="VmWi", .source="volmgrx.sys", .description="Work items"},
    {.tag="VoS?", .source="volsnap.sys", .description="VolSnap (Volume Snapshot Driver)"},
    {.tag="VoSa", .source="volsnap.sys", .description="Application information allocations"},
    {.tag="VoSb", .source="volsnap.sys", .description="Buffer allocations"},
    {.tag="VoSc", .source="volsnap.sys", .description="Snapshot context allocations"},
    {.tag="VoSd", .source="volsnap.sys", .description="Diff area volume allocations"},
    {.tag="VoSf", .source="volsnap.sys", .description="Diff area file allocations"},
    {.tag="VoSh", .source="volsnap.sys", .description="Bit history allocations"},
    {.tag="VoSi", .source="volsnap.sys", .description="Io status block allocations"},
    {.tag="VoSm", .source="volsnap.sys", .description="Bitmap allocations"},
    {.tag="VoSo", .source="volsnap.sys", .description="Old heap entry allocations"},
    {.tag="VoSp", .source="volsnap.sys", .description="Pnp id allocations"},
    {.tag="VoSr", .source="volsnap.sys", .description="Device relations allocations"},
    {.tag="VoSs", .source="volsnap.sys", .description="Short term allocations"},
    {.tag="VoSt", .source="volsnap.sys", .description="Temp table allocations"},
    {.tag="VoSw", .source="volsnap.sys", .description="Work queue allocations"},
    {.tag="VoSx", .source="volsnap.sys", .description="Dispatch context allocations"},
    {.tag="Vpb", .source="<unknown>", .description="Io"},
    {.tag="Vprt", .source="videoprt.sys", .description="Video port for legacy (pre"},
    {.tag="VraP", .source="<unknown>", .description="parallel class driver"},
    {.tag="vTDR", .source="dxgkrnl.sys", .description="Video timeout detection/recovery"},
    {.tag="Vtfd", .source="<unknown>", .description="Font file/context"},
    {.tag="Wait", .source="<unknown>", .description="NtWaitForMultipleObjects"},
    {.tag="Wan?", .source="<unknown>", .description="NdisWan Tags (PPP Framing module for Remote Access)"},
    {.tag="WanA", .source="<unknown>", .description="BundleCB"},
    {.tag="WanB", .source="<unknown>", .description="ProtocolCB/LinkCB"},
    {.tag="WanC", .source="<unknown>", .description="DataDesc"},
    {.tag="WanD", .source="<unknown>", .description="WanRequest"},
    {.tag="WanE", .source="<unknown>", .description="LoopbackDesc"},
    {.tag="WanG", .source="<unknown>", .description="MiniportCB"},
    {.tag="WanH", .source="<unknown>", .description="OpenCB"},
    {.tag="WanI", .source="<unknown>", .description="IoPacket"},
    {.tag="WanJ", .source="<unknown>", .description="LineUpInfo"},
    {.tag="WanK", .source="<unknown>", .description="Unicode String Buffer"},
    {.tag="WanL", .source="<unknown>", .description="Protocol Table"},
    {.tag="WanM", .source="<unknown>", .description="Connection Table"},
    {.tag="WanN", .source="<unknown>", .description="NdisPacketPool Desc"},
    {.tag="WanQ", .source="<unknown>", .description="DataBuffer"},
    {.tag="WanR", .source="<unknown>", .description="WanPacket"},
    {.tag="WanS", .source="<unknown>", .description="AfCB/SapCB/VcCB"},
    {.tag="WanT", .source="<unknown>", .description="Transform Driver"},
    {.tag="WanV", .source="<unknown>", .description="RC4 Encryption Context"},
    {.tag="WanW", .source="<unknown>", .description="SHA Encryption"},
    {.tag="WanX", .source="<unknown>", .description="Send Compression Context"},
    {.tag="WanY", .source="<unknown>", .description="Recv Compression Context"},
    {.tag="WanZ", .source="<unknown>", .description="Protocol Specific Info"},
    {.tag="WCbf", .source="dwudf.sys", .description="(DVD Write Now) Cache storage buffer"},
    {.tag="WCrf", .source="dwudf.sys", .description="(DVD Write Now) Cache frame list"},
    {.tag="WCtx", .source="dwudf.sys", .description="(DVD Write Now) Cache context block"},
    {.tag="Wdm", .source="<unknown>", .description="WDM"},
    {.tag="WDMA", .source="<unknown>", .description="WDM Audio"},
    {.tag="Wdog", .source="watchdog.sys", .description="Watchdog object/context allocation"},
    {.tag="werk", .source="<unknown>", .description="WER kernel mode reporting allocation"},
    {.tag="WimF", .source="wimfsf.sys", .description="WIM Boot Filter"},
    {.tag="WMca", .source="<unknown>", .description="WMI MCA Handling"},
    {.tag="WmDS", .source="<unknown>", .description="Wmi DataSource chunks"},
    {.tag="WmGE", .source="<unknown>", .description="Wmi GuidEntry chunks"},
    {.tag="WmiA", .source="<unknown>", .description="Wmi ACPI mapper"},
    {.tag="WmiC", .source="<unknown>", .description="Wmi Create Pump Thread Work Item"},
    {.tag="WmiD", .source="<unknown>", .description="Wmi Registration DataSouce"},
    {.tag="WmiG", .source="<unknown>", .description="Allocation of WMIGUID"},
    {.tag="WmiI", .source="<unknown>", .description="Wmi Instance Names"},
    {.tag="Wmii", .source="<unknown>", .description="Wmi InstId chunks"},
    {.tag="Wmij", .source="<unknown>", .description="Wmi GuidMaps"},
    {.tag="WmiL", .source="<unknown>", .description="WmiLIb"},
    {.tag="Wmim", .source="<unknown>", .description="Wmi KM to UM Notification Buffers"},
    {.tag="WmiN", .source="<unknown>", .description="Wmi Notification Notification Packet"},
    {.tag="Wmin", .source="<unknown>", .description="Wmi Notification Slot Chunks"},
    {.tag="Wmip", .source="<unknown>", .description="Wmi General purpose allocation"},
    {.tag="Wmiq", .source="<unknown>", .description="Wmi NBQ Blocks"},
    {.tag="WmiR", .source="<unknown>", .description="Wmi Registration info blocks"},
    {.tag="WmIS", .source="<unknown>", .description="Wmi InstanceSet chunks"},
    {.tag="Wmis", .source="<unknown>", .description="Wmi SysId allocations"},
    {.tag="Wmit", .source="<unknown>", .description="Wmi Trace"},
    {.tag="Wmiw", .source="<unknown>", .description="Wmi Notification Waiting Buffers"},
    {.tag="Wmiz", .source="<unknown>", .description="Wmi MCA Insertions debug code"},
    {.tag="WmMR", .source="<unknown>", .description="Wmi MofResouce chunks"},
    {.tag="WMsG", .source="win32k.sys", .description="Winlogon kernel mode IPC interface"},
    {.tag="Wrp?", .source="<unknown>", .description="WanArp Tags (ARP module for Remote Access)"},
    {.tag="Wrpa", .source="<unknown>", .description="WAN_ADAPTER_TAG"},
    {.tag="Wrpc", .source="<unknown>", .description="WAN_CONN_TAG"},
    {.tag="Wrpd", .source="<unknown>", .description="WAN_DATA_TAG"},
    {.tag="Wrpf", .source="<unknown>", .description="FREE_TAG (checked builds only)"},
    {.tag="Wrph", .source="<unknown>", .description="WAN_HEADER_TAG"},
    {.tag="Wrpi", .source="<unknown>", .description="WAN_INTERFACE_TAG"},
    {.tag="Wrpn", .source="<unknown>", .description="WAN_NOTIFICATION_TAG"},
    {.tag="Wrpr", .source="<unknown>", .description="WAN_REQUEST_TAG"},
    {.tag="Wrps", .source="<unknown>", .description="WAN_STRING_TAG"},
    {.tag="Wrpw", .source="<unknown>", .description="WAN_PACKET_TAG"},
    {.tag="WvCy", .source="<unknown>", .description="WDM Audio WaveCyc port"},
    {.tag="WvPc", .source="<unknown>", .description="WDM Audio WavePCI port"},
    {.tag="xCVD", .source="mrxdav.sys", .description="AsyncEngineContext Tag"},
    {.tag="XDR?", .source="rpcxdr.sys", .description="NFS (Network File System) XDR driver"},
    {.tag="xSMB", .source="smbmrx.sys", .description="IFSKIT sample SMB mini"},
    {.tag="Xtra", .source="<unknown>", .description="EXIFS Extra Create"},
    {.tag="XWan", .source="<unknown>", .description="ndisusrwan allocations"},
    {.tag="ysd8", .source="win32k.sys", .description="User DDE8"},
    {.tag="ysd9", .source="win32k.sys", .description="User DDE9"},
    {.tag="ysda", .source="win32k.sys", .description="User DDEa"},
    {.tag="ysdb", .source="win32k.sys", .description="User DDEb"},
    {.tag="ysdc", .source="win32k.sys", .description="User DDEc"},
    {.tag="ysdd", .source="win32k.sys", .description="User DDEd"},
    {.tag="Zowz", .source="WsFbbPoDzRcP", .description="comment4"},
    {.tag="ZsaB", .source="<unknown>", .description="EXIFS ZeroBlock"},
    {.tag="_ATI", .source="<unknown>", .description="ATI video driver"},
    {.tag="_LCD", .source="monitor.sys", .description="Monitor PDO name buffer"},
    {.tag="NSpg", .source="nsi.dll", .description="NSI Proxy Generic Buffers"},
    {.tag="NSIr", .source="nsi.dll", .description="NSI Generic Buffers"},
    {.tag="Pccr", .source="pacer.sys", .description="PACER Filter Clone Requests"},
    {.tag="ScC7", .source="classpnp.sys", .description="Sense info buffer"},
    {.tag="RxEc", .source="rdbss.sys", .description="Rdr2 rdbss.sys stuff"},
    {.tag="RxM2", .source="rdbss.sys", .description="Rdr2 rdbss.sys stuff"},
    {.tag="RxCo", .source="rdbss.sys", .description="Rdr2 rdbss.sys stuff"},
};
#endif
